[B! Security] zonoiseã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

zonoise id:zonoise

Securityã«é–¢ã™ã‚‹zonoiseã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (18)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ä»®æƒ³é€šè²¨ãƒžã‚¤ãƒ‹ãƒ³ã‚°ï¼ˆCoinhiveï¼‰ã§å®¶å®…æœç´¢ã‚’å—ã‘ãŸè©± - Webã‚’æ¥½ã—ã‚‚ã†ã€Œãƒ‰ãƒ¼ã‚¯ãƒ„ã€
è¡¨é¡Œã®é€šã‚Šã€ãŠæ¥ãšã‹ã—ã„é™ã‚Šã§ã¯ã‚ã‚Šã¾ã™ãŒã€äººç”Ÿã§ã¯ã˜ã‚ã¦è¦å¯Ÿï¼ˆç¥žå¥ˆå·çœŒè¦ï¼ï¼‰ã®ãŠä¸–è©±ã«ãªã‚‹é‹ã³ã¨ãªã‚Šã¾ã—ãŸã€‚ ç½ªçŠ¶ã¨ã—ã¦ã¯ã€Œä¸æ£æŒ‡ä»¤é›»ç£çš„è¨˜éŒ² å–å¾—ãƒ»ä¿ç®¡ç½ªã€ã€é€šç§°ã‚¦ã‚¤ãƒ«ã‚¹ç½ªã¨ã®ã“ã¨ã§ã€ã¾ã•ã«é’å¤©ã®éœ¹é‚ã®æ€ã„ã§ã™ã€‚ ä»¥ä¸‹ã§ã¯ã“ã®åº¦èµ·ã“ã£ãŸã“ã¨ã‚’å¯èƒ½ãªç¯„å›²ã§ã‚ã‚Šã®ã¾ã¾å…±æœ‰ã§ãã‚Œã°ã¨æ€ã„ã¾ã™ã€‚ ã“ã®è¨˜äº‹ã®ç›®çš„ã¾ãšã€ã“ã®è¨˜äº‹ã‚’å…¬é–‹ã—ãŸç›®çš„ã¯ã€Œä»–ã®ã‚¯ãƒªã‚¨ã‚¤ã‚¿ãƒ¼ã®äººã«åŒã˜çµŒé¨“ã‚’ã—ã¦æ¬²ã—ããªã„ã€ã¨ã„ã†ä¸€ç‚¹ã«å°½ãã¾ã™ã€‚ æ‰‹å‰å‘³å™Œã§ã¯ã‚ã‚Šã¾ã™ãŒã€ç§ã¯ã“ã‚Œã¾ã§å¤šãã®å°Šæ•¬ã™ã‚‹ã‚¯ãƒªã‚¨ã‚¤ã‚¿ãƒ¼ã®æ–¹ã€…ã¨åŒã˜ã‚ˆã†ã«ã€Œè‰¯ã„ã‚¯ãƒªã‚¨ã‚¤ã‚¿ãƒ¼ã§ã‚ã‚ã†ã€ã¨è…å¿ƒã—ã€ã§ãã†ã‚‹ã‹ãŽã‚Šã®åŠªåŠ›ã‚’ã—ã¦ããŸã¤ã‚‚ã‚Šã§ã™ã€‚ ä»Šå›žã®ä»¶ã«é–¢ã—ã¦ã‚‚æ±ºã—ã¦ç§åˆ©ç§æ¬²ã®ãŸã‚ã§ã¯ãªãã€ã‚ãã¾ã§ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãŸã‚ã«ã§ãã‚‹ã“ã¨ã‚’ã€ã¨æ¨¡ç´¢ã—ãŸçµæžœã§ã—ãŸã€‚ ãã‚ŒãŒã“ã®ã‚ˆã†ãªå½¢ã§å–ã‚Šæ²™æ±°ã•ã‚Œã‚‹ã“ã¨ã¨ãªã‚Šã€æ®‹å¿µã¨ã„ã†ä»–ã‚ã‚Šã¾ã›ã‚“ã€‚ å¿¸æ€©ãŸã‚‹æ€ã„ã§ã¯ã‚ã‚Šã¾ã™ãŒã€ã“ã®ä»¶ã‹ã‚‰ä½•ã‹ã—
zonoise 2018/06/12
Coinhive

security

è£åˆ¤
ãƒªãƒ³ã‚¯
OAuth 2.0 Implicit Flowã‚’ãƒ¦ãƒ¼ã‚¶ãƒ¼èªè¨¼ã«åˆ©ç”¨ã™ã‚‹éš›ã®ãƒªã‚¹ã‚¯ã¨å¯¾ç–æ–¹æ³•ã«ã¤ã„ã¦ #idcon - r-weblife
ãŠã¯ã‚ˆã†ã”ã–ã„ã¾ã™ã€ritouã§ã™ã€‚ ä»Šå›žã¯ã€ä¸€éƒ¨ã§å…ˆé€±è©±é¡Œãªã‚Šã¾ã—ãŸOAuth 2.0ã®Implicit Flowã«ã¤ã„ã¦ã®ã‚¨ãƒ³ãƒˆãƒªã«ãªã‚Šã¾ã™ã€‚ (2012/2/7 ã„ã‚ã„ã‚ã¨ä¿®æ£ã—ã¾ã—ãŸã€‚) å˜ãªã‚‹ OAuth 2.0 ã‚’èªè¨¼ã«ä½¿ã†ã¨ã€è»ŠãŒé€šã‚Œã‚‹ã»ã©ã®ã©ã§ã‹ã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ãƒ»ãƒ›ãƒ¼ãƒ«ãŒã§ãã‚‹ | @_Nat Zone Thread Safe: The probl em with OAuth for Authentication. ä»Šå›žã¯ä»¥ä¸‹ã®å†…å®¹ã«ã¤ã„ã¦æ•´ç†ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ OAuth 2.0ã®ã©ã®æ©Ÿèƒ½ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ãŒã‚ã‚‹ã®ã‹ èª°ãŒæ”»æ’ƒè€…ã«ãªã‚Œã‚‹ã®ã‹ å¯¾ç– OAuth 2.0 Implicit Flowã¨ã¯ OAuth 2.0ã§ã¯ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£ãƒ¼ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒä¿è·ãƒªã‚½ãƒ¼ã‚¹ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹æ¨©é™ã‚’å¾—ã‚‹ãŸã‚ã®ã„ãã¤ã‹ã®ãƒ•ãƒãƒ¼ãŒå®šç¾©ã•ã‚Œã¦ã„ã¾ã™ã€‚ (ä»•æ§˜ä¸ã§ã¯Flowã‚„Grant Type
zonoise 2012/02/07
oauth

Security
ãƒªãƒ³ã‚¯
Sign in - Google Accounts
Not your computer? Use a private browsing window to sign in. Learn more about using Guest mode
zonoise 2012/01/10
é›»åæ›¸ç±

security
ãƒªãƒ³ã‚¯
ã€ŒSQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–ã€ã§Googleæ¤œç´¢ã—ã¦ä¸Šä½15è¨˜äº‹ã‚’æ¤œè¨¼ã—ãŸ - ockeghem's blog
ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€ãƒãƒƒãƒˆä¸Šã§ã€ŒSQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–ã€ã§Googleæ¤œç´¢ã—ãŸçµæžœã®ä¸Šä½15ã‚¨ãƒ³ãƒˆãƒªã‚’æ¤œè¨¼ã—ãŸçµæžœã‚’å ±å‘Šã—ã¾ã™ã€‚ SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³è„†å¼±æ€§ã®å¯¾ç–ã¯ã€æ—¢ã«ã€Œå®‰å…¨ãªSQLã®å‘¼ã³å‡ºã—æ–¹ã€ã«ãƒ•ã‚¡ã‚¤ãƒŠãƒ«ã‚¢ãƒ³ã‚µãƒ¼ï¼ˆå¾Œè¿°ï¼‰ã‚’ç¤ºã—ã¦ã„ã¾ã™ãŒã€ã¾ã ã“ã®æ–‡æ›¸ã‚’çŸ¥ã‚‰ãªã„äººãŒå¤šã„ã ã‚ã†ã“ã¨ã¨ã€ã‚„ã‚„ä¸Šç´šè€…å‘ã‘ã®æ–‡æ›¸ã§ã‚ã‚‹ã“ã¨ã‹ã‚‰ã€ã¾ã ååˆ†ã«å®Ÿè·µã•ã‚Œã¦ã¯ã„ãªã„ã¨æ€ã„ã¾ã™ã€‚ ã“ã®çŠ¶æ³ã§ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ã“ã¨ã‚’ã‚ˆãçŸ¥ã‚‰ãªã„äººãŒSQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–ã—ã‚ˆã†ã¨ã—ãŸå ´åˆã®è¡Œå‹•ã‚’äºˆæ¸¬ã—ã¦ã¿ã‚‹ã¨ã€ã‹ãªã‚Šã®å‰²åˆã®äººãŒGoogleç‰ã§æ¤œç´¢ã—ã¦å¯¾å‡¦æ–¹æ³•ã‚’èª¿ã¹ã‚‹ã¨æ€ã‚ã‚Œã¾ã™ã€‚ãã“ã§ã€ä»¥ä¸‹ã®URLã§SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–æ–¹æ³•ã‚’æ¤œç´¢ã—ãŸçµæžœã®ä¸Šä½ã®ã‚¨ãƒ³ãƒˆãƒªã‚’æ¤œè¨¼ã—ã¦ã¿ã‚ˆã†ã¨æ€ã„ç«‹ã¡ã¾ã—ãŸã€‚ http://www.google.co.jp/search?q=SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç– ã©ã“ã¾ã§èª¿ã¹ã‚‹ã‹ã§ã™ãŒã€ä»¥å‰NH
zonoise 2011/12/29
sql

Security
ãƒªãƒ³ã‚¯
mixiè¶³ã‚ã¨å»ƒæ¢ã«å¯„ã›ã¦ - æœ€é€Ÿè»¢è·ç ”ç©¶ä¼š | ã‚³ãƒ¡ãƒ³ãƒˆ mixiã£ã¦ä»Šã»ã¨ã‚“ã©ãŒãƒ¢ãƒã‚¤ãƒ«ã§ã‚¢ã‚¯ã‚»ã‚¹ã•ã‚Œã¦ãŸã¯ãšã ã‘ã©ã€ã‚¹ãƒžãƒ›ä»¥å¤–ã®ã‚¬ãƒ©ã‚±ãƒ¼ã§ã‚‚ã“ã®å•é¡ŒãŒèµ·ãã‚‹ã®ï¼Ÿ
mixiãŒ6å¹´ä»¥ä¸Šã«æ¸¡ã£ã¦æ”¾ç½®ã—ã¦ããŸè¶³ã‚ã¨æ©Ÿèƒ½ã‚’ä½¿ã£ã¦è¨ªå•è€…ã®å€‹äººç‰¹å®šãŒå¯èƒ½ãªè„†å¼±æ€§ã‚’ä¿®æ£ã—ãŸã€‚ç°¡å˜ã«èª¬æ˜Žã™ã‚‹ã¨mixiä»¥å¤–ã®ã‚µã‚¤ãƒˆã‹ã‚‰ã§ã‚‚ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«æ°—ä»˜ã‹ã‚Œãšã«ã€ãã®äººã®mixiã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ç‰¹å®šã™ã‚‹ã¨ã„ã†ã“ã¨ãŒå‡ºæ¥ãŸãŒã€å‡ºæ¥ãªããªã£ãŸã€‚(æ£ç¢ºã«ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒæ°—ä»˜ã„ãŸã¨ã—ã¦ã‚‚ç‰¹å®šã•ã‚ŒãŸå¾Œ) ã‚¢ãƒ€ãƒ«ãƒˆã‚µã‚¤ãƒˆãŒè¨ªå•è€…ã®mixiã‚¢ã‚«ã‚¦ãƒ³ãƒˆåŽé›†ã—ãŸã‚Šã€ãƒ¯ãƒ³ã‚¯ãƒªãƒƒã‚¯è©æ¬ºã‚µã‚¤ãƒˆãŒmixiã‚¢ã‚«ã‚¦ãƒ³ãƒˆç‰¹å®šã—ã¦è¿½ã„è¾¼ã¿ã‹ã‘ãŸã‚Šã€çŸ¥ã‚‰ãªã„äººã‹ã‚‰ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸é€ã‚‰ã‚Œã¦ãã¦URLé–‹ã„ãŸã‚‰mixiã‚¢ã‚«ã‚¦ãƒ³ãƒˆç‰¹å®šã•ã‚Œã¦ãŸã‚Šã€ãã†ã„ã†ã“ã¨ãŒä»Šã¾ã§å‡ºæ¥ã¦ã„ãŸã®ãŒå‡ºæ¥ãªããªã£ãŸã€‚ éŽåŽ»ã«ã‚‚ã„ã‚ã‚“ãªäººãŒè¨€åŠã—ã¦ã‚‹ã—ã€ã™ã§ã«çµ‚ã‚ã£ãŸè°è«–ã ã¨æ€ã£ã¦ã‚‹äººã‚‚ã„ã‚‹ã ã‚ã†ã€‚ä¸–é–“ä¸€èˆ¬ã«ã©ã‚Œãã‚‰ã„èªçŸ¥ã•ã‚Œã¦ã„ãŸã®ã‹ã¯ã‚ˆãåˆ†ã‹ã‚‰ãªã„ãŒã€å°‘ãªãã¨ã‚‚æŠ€è¡“è€…ã‚„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶è€…ã®é–“ã§ã¯ã‚ˆãçŸ¥ã‚‰ã‚Œã¦ã„ã‚‹å•é¡Œã ã£ãŸã€‚ http://internet.kil
zonoise 2011/09/12
mixi

security
ãƒªãƒ³ã‚¯
Apache killerã¯å±é™ºï½žApache killerã‚’è©•ä¾¡ã™ã‚‹ä¸Šã§ã®æ³¨æ„ï½ž
Apacheã®è„†å¼±æ€§(CVE-2011-3192)ã„ã‚ã‚†ã‚‹Apache killerãŒè©±é¡Œã«ãªã£ã¦ã„ã¾ã™ãŒã€ãã®è„…å¨ã«ã¤ã„ã¦ã¯ä¸€éƒ¨èª¤è§£ãŒã‚ã‚‹ã‚ˆã†ã§ã™ã€‚ ä»¥ä¸‹ã¯ã€éžå¸¸ã«è„…å¨ã¨ã™ã‚‹å ±å‘Šã®ä¾‹ã§ã™ã€‚ ä¸€æ–¹ä»Šå›žã®ã¯ãƒ—ãƒã‚»ã‚¹ã®è‚¥å¤§åŒ–ã‚’ä¼´ã†ã®ã§ã€å®Ÿãƒ¡ãƒ¢ãƒªæ¶ˆè²»ã—ã¦æ›´ã«ã‚¹ãƒ¯ãƒƒãƒ—ã‚‚ä½¿ã„å°½ãã—ã¦OSæ¯Žæ¿€é‡ã«ãªã£ãŸã‚ã’ãLinuxã¨ã‹ã®å ´åˆã¯OOM Killerç™ºå‹•ã¨ã€ä»–ã®ãƒ—ãƒã‚»ã‚¹ã‚„å ´åˆã«ã‚ˆã£ã¦ã¯OSã‚’å·»ãè¾¼ã‚“ã§é€ã£ã¦ã—ã¾ã„ã¾ã™ã€‚ CVE-2011-3192 Range header DoS vulnerability Apache HTTPD 1.3/2.xã‚ˆã‚Šå¼•ç”¨ ä»¥ä¸‹ã¯ã€ãã‚Œã»ã©è„…å¨ã§ãªã‹ã£ãŸã¨ã™ã‚‹å ±å‘Šã®ä¾‹ã§ã™ã€‚ pooh.gr.jp ã¯çµæ§‹é ‘ä¸ˆã ã£ãŸã®ã§ 60 ä¸¦åˆ—ã§ã‚„ã£ã¨ CPU idle 30% ã¾ã§æ¸›ã‚‰ã›ãŸã€‚ Apache Killer (CVE-2011-3192) å¯¾ç– for CentOS 5
zonoise 2011/08/28
apache

security
ãƒªãƒ³ã‚¯
å…¥è©¦ã‚«ãƒ³ãƒ‹ãƒ³ã‚°äº‹ä»¶ã§ä¸¸è£¸ãªå€‹äººæƒ…å ±ã®å®Ÿæ…‹ãŒæ˜Žã‚‰ã‹ã« - ãƒ‹ãƒ¥ãƒ¼ã‚¹ãƒ»ã‚³ãƒ¡ãƒ³ã‚¿ãƒªãƒ¼ - ãƒ“ãƒ‡ã‚ªãƒ‹ãƒ¥ãƒ¼ã‚¹ãƒ»ãƒ‰ãƒƒãƒˆã‚³ãƒ ã€€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆæ”¾é€å±€
äº¬éƒ½å¤§å¦ãªã©ã®å…¥å¦è©¦é¨“ã®å•é¡ŒãŒWebã‚µã‚¤ãƒˆã«æŠ•ç¨¿ã•ã‚ŒãŸå•é¡Œã§ã€ï¼“æ—¥ã€äº¬éƒ½åºœè¦ãŒæŠ•ç¨¿ä¸»ã¨è¦‹ã‚‰ã‚Œã‚‹å—é¨“ç”Ÿã®ç”·æ€§ã‚’å½è¨ˆæ¥å‹™å¦¨å®³ã®å®¹ç–‘ã§é€®æ•ã—ãŸãŒã€ã“ã®äº‹ä»¶ã«ã‚ˆã£ã¦ã€è¦å¯ŸãŒä»¤çŠ¶ã‚’å–ã‚‰ãªã„ã¾ã¾ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆäº‹æ¥è€…ã‚„æºå¸¯é›»è©±ä¼šç¤¾ã‹ã‚‰ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®å€‹äººæƒ…å ±ã‚’å®¹æ˜“ã«å…¥æ‰‹ã§ãã‚‹å®Ÿæ…‹ãŒã€ã„ã¿ã˜ãã‚‚æ˜Žã‚‰ã‹ã«ãªã£ãŸã€‚ ä»Šå›žã®ã‚«ãƒ³ãƒ‹ãƒ³ã‚°äº‹ä»¶ã¯ã€å—é¨“è€…ã®ä¸€äººãŒè©¦é¨“ä¼šå ´ã‹ã‚‰æºå¸¯é›»è©±ã‚’ä½¿ã£ã¦è©¦é¨“å•é¡Œã‚’ã€Œãƒ¤ãƒ•ãƒ¼çŸ¥æµè¢‹ã€ã¨ã„ã†ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä¸Šã®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã«æŠ•ç¨¿ã—ã€ä¸ç‰¹å®šå¤šæ•°ã®ä¸€èˆ¬ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‹ã‚‰å›žç”ã‚’æ±‚ã‚ãŸã¨ã„ã†ã‚‚ã®ã€‚å¤§å¦ã¸ã®åŒ¿åã®é€šå ±é›»è©±ã«ã‚ˆã£ã¦ã€è©¦é¨“å•é¡ŒãŒã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã«æŠ•ç¨¿ã•ã‚Œã¦ã„ã‚‹ã“ã¨ãŒæ˜Žã‚‰ã‹ã«ãªã‚Šã€äº¬éƒ½å¤§å¦ãªã©ãŒè¦å¯Ÿã«è¢«å®³å±Šã‚’æå‡ºã—ãŸã“ã¨ã§ã€åˆ‘äº‹äº‹ä»¶ã¨ãªã£ãŸã€‚ å½è¨ˆæ¥å‹™å¦¨å®³ã®å®¹ç–‘ã§æœæŸ»ã«ç€æ‰‹ã—ãŸè¦å¯Ÿã¯ã¾ãšã€ã“ã®ã‚µã‚¤ãƒˆã‚’é‹å–¶ã™ã‚‹ãƒ¤ãƒ•ãƒ¼ã‚¸ãƒ£ãƒ‘ãƒ³ã®ã‚¢ã‚¯ã‚»ã‚¹è¨˜éŒ²ã‹ã‚‰æºå¸¯é›»è©±ã‚’ä½¿ã£ã¦æŠ•ç¨¿ã•ã‚ŒãŸã‚‚ã®ã§ã‚ã‚‹ã“ã¨ã‚’ç¢ºèªã€æºå¸¯é›»è©±ã®ã‚¢ã‚¯
zonoise 2011/03/05
ã‚²ã‚¹ãƒˆï¼šé«˜æœ¨æµ©å…‰æ°ã€é’æœ¨ç†æ°

*ã‚ã¨ã§è¦‹ã‚‹

Security
ãƒªãƒ³ã‚¯
BBC News - Newsnight - Proposal for cyber war rules of engagement
The world needs cyber war "Rules of Engagement" to cope with potentially devastating cyber weapons, Russian and US experts will tell world leaders at a security conference on Friday. The cyber proposal, seen exclusively by Newsnight, comes from the influential EastWest Institute in New York. It describes "rendering the Geneva and Hague conventions in cyberspace". Cyber security is on the agenda at
zonoise 2011/02/05
ã‚µã‚¤ãƒãƒ¼æˆ¦äº‰ã®äº¤æˆ¦è¦å®šã¨ã„ã†è¨³ã§ã„ã„ã®ã‹ãªã€‚

Security
ãƒªãƒ³ã‚¯
è‡ªåˆ†ã§ã§ãã‚‹Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³è„†å¼±æ€§è¨ºæ– - ãƒ‡ãƒ–ã‚µãƒŸ2010
ã‚ãªãŸã‚‚ãªã‚Œã‚‹ ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã€‘ EC-Council æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢è‚²æˆãƒˆãƒ¬ãƒ¼ãƒ‹ãƒ³ã‚°ã‚³ãƒ¼ã‚¹ã€Œ "ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢" ã«! ãŠ...
zonoise 2010/11/07
security
ãƒªãƒ³ã‚¯
Google Code University - Google Code
This website provides tutorials and sample course content so CS students and educators can learn more about current computing techno logies and paradigms. In particular, this content is Creative Commons licensed which makes it easy for CS educators to use in their own classes. The Courses section contains tutorials, lecture slides, and probl em sets for a variety of topic areas: AJAX Programming Alg
zonoise 2010/10/22
Tutorial

google

ajax

web

Security

MapReduce

android

c++
ãƒªãƒ³ã‚¯
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã€å€‹äººæƒ…å ±ã®æœ€æ–°ãƒ‹ãƒ¥ãƒ¼ã‚¹ï¼šSecurity NEXT
NoSQLãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã€ŒMongo DBã€ã«æƒ…å ±æ¼æ´©ã®è„†å¼±æ€§ãŒæ˜Žã‚‰ã‹ã¨ãªã£ãŸã€‚é‡å¤§ãªæ©Ÿå¯†æƒ…å ±ãŒå¤–éƒ¨ã‚ˆã‚Šçªƒå–ã•ã‚Œã‚‹ãŠãã‚Œã‚‚ã‚ã‚Šã€æ—©æ€¥ã«å¯¾ç–ã‚’è¬›ã˜ã‚‹ã‚ˆã†å‘¼ã³ã‹ã‘ã‚‰ã‚Œã¦ã„ã‚‹ã€‚ ï¼ˆ2025/12/29ï¼‰
zonoise 2010/05/21
security
ãƒªãƒ³ã‚¯
ã€ŒWhoppixã€ã‚’ä½¿ã£ã¦ãƒšãƒãƒˆãƒ¬ãƒ¼ã‚·ãƒ§ãƒ³ãƒ†ã‚¹ãƒˆã‚’ã‚„ã‚ã†
æœ€è¿‘ã€ååˆ†ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã‚’æ–½ã—ã¦ã„ã‚‹ã«ã‚‚ã‹ã‹ã‚ã‚‰ãšã€ãã‚ŒãŒç ´ã‚‰ã‚Œã¦ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã•ã‚Œã¦ã—ã¾ã£ãŸäº‹ä»¶ãŒã„ãã¤ã‹èµ·ã“ã£ã¦ã„ã‚‹ã€‚ã¨ã€ã“ã®ã‚»ãƒªãƒ•ã¯1å¹´å¾Œã«ã“ã®è¨˜äº‹ã‚’èªã‚“ã§ã‚‚æœ‰åŠ¹ã‹ã‚‚ã—ã‚Œãªã„ã¨æ€ã†ãã‚‰ã„ã€ã“ã†ã„ã£ãŸäº‹ä»¶ã¯æ—¥å¸¸èŒ¶é£¯äº‹ã«ãªã£ã¦ã„ã‚‹æ„ŸãŒã‚ã‚‹ã€‚ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã«ãŠã„ã¦ã¯ã€â€œååˆ†ã â€ã¨ã„ã†ç·šã‚’å¼•ãã®ã¯éžå¸¸ã«é›£ã—ã„ã€‚ãƒªã‚¹ã‚¯ã®æ´—ã„å‡ºã—ã‚„ã€ãã‚Œã‚‰ã®ãƒªã‚¹ã‚¯ã«å¯¾å¿œã§ãã‚‹ã‚ˆã†ã«ã™ã‚‹ã“ã¨ã¯å¤§å¤‰ãªä»•äº‹ã«ãªã‚‹ã€‚ å¤–éƒ¨ã‹ã‚‰å¼±ç‚¹ã‚’ç™ºè¦‹ã™ã‚‹ãƒšãƒãƒˆãƒ¬ãƒ¼ã‚·ãƒ§ãƒ³ãƒ†ã‚¹ãƒˆ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã«ã‚‚ã•ã¾ã–ã¾ãªã‚‚ã®ãŒã‚ã‚‹ãŒã€ãã®ä¸ã®1ã¤ã«ãƒšãƒãƒˆãƒ¬ãƒ¼ã‚·ãƒ§ãƒ³ãƒ†ã‚¹ãƒˆï¼ˆpenetration testï¼‰ã¨ã„ã†æ–¹æ³•ãŒã‚ã‚‹ã€‚ã“ã‚Œã¯ã€æ—¢çŸ¥ã®æ”»æ’ƒæ–¹æ³•ã‚„ä¾µå…¥æ–¹æ³•ãªã©ã‚’ã‚·ã‚¹ãƒ†ãƒ ã«å¯¾ã—ã¦å®Ÿéš›ã«è¡Œã†ã“ã¨ã§ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®å¼±ç‚¹ã‚’ç™ºè¦‹ã™ã‚‹ãƒ†ã‚¹ãƒˆæ–¹æ³•ã§ã‚ã‚‹ã€‚ ã“ã®æ‰‹æ³•ã‚’ç”¨ã„ã‚Œã°ã€ã‚·ã‚¹ãƒ†ãƒ ã¸ã®ä¾µå…¥ã‚„æ”»æ’ƒã«åˆ©ç”¨ã•ã‚Œã¦ã—ã¾ã„ãã†ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ã‚„è¨å®šã®ä¸å‚™ãªã©
zonoise 2010/05/13
Security
ãƒªãƒ³ã‚¯
ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒª - Wikipedia
ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒª (è‹±èªžï¼šcross-site request forgeryã€ç•¥ç§°ï¼šCSRF) ã¯ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«å¯¾ã—ã€ä¿¡é ¼ã™ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‹ã‚‰è¨±å¯ã•ã‚Œã¦ã„ãªã„ã‚³ãƒžãƒ³ãƒ‰ãŒé€ä¿¡ã§ãã¦ã—ã¾ã†è„†å¼±æ€§[1]ã€ã‚‚ã—ãã¯ãã‚Œã‚’åˆ©ç”¨ã—ãŸæ”»æ’ƒã§ã‚ã‚‹ã€‚ç•¥ç§°ã¯CSRFï¼ˆã‚·ãƒ¼ã‚µãƒ¼ãƒ• (sea-surf) ã¨èªã¾ã‚Œã‚‹äº‹ã‚‚ã‚ã‚‹[2][3]ï¼‰ã€ã¾ãŸã¯XSRFã€‚ãƒªã‚¯ã‚¨ã‚¹ãƒˆå¼·è¦[4]ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³ãƒ©ã‚¤ãƒ‡ã‚£ãƒ³ã‚° (session riding[3]) ã¨ã‚‚å‘¼ã°ã‚Œã‚‹ã€‚1990å¹´ä»£ã¯ã‚¤ãƒ¡ã‚¿ã‚°æ”»æ’ƒã¨ã‚‚å‘¼ã°ã‚Œã¦ã„ãŸ[è¦å‡ºå…¸]ã€‚è„†å¼±æ€§æƒ…å ±ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã®CWEã§ã¯ã€CSRFã‚’ãƒ‡ãƒ¼ã‚¿èªè¨¼ã®ä¸ååˆ†ãªæ¤œè¨¼ (CWE-345) ã«ã‚ˆã‚‹è„†å¼±æ€§ã®ã²ã¨ã¤ã¨ã—ã¦åˆ†é¡žã—ã¦ã„ã‚‹ (CWE-352)[5]ã€‚ ãªãŠCSRFã®æ£å¼åç§°ã¯ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚° (XSS) ã¨ä¼¼ã¦ã„ã‚‹ãŒã€XSSã¯ä¸é©åˆ‡ãªå…¥åŠ›ç¢ºèª (CWE-20) ã«
zonoise 2010/05/13
security
ãƒªãƒ³ã‚¯
Microsoft Sysinternals Process Explorer + Debugging Tools for Windows - å–ç· å½¹ å¹³ç¤¾å“¡ ãƒ–ãƒã‚° (ãƒ™ãƒ¼ã‚¿ç‰ˆ)
è„³è„‚è‚ªã•ã‚“ã¨ã“ã‚çµŒç”±ã§ã™ã€‚ ã€Œä½™è«‡ã€ã«åå¿œã—ã¾ã—ãŸã€‚æœ¬é¡Œã«é–¢ã—ã¦ã‚‚è‡ªåˆ†ã®ã‚¢ãƒ³ãƒ†ãƒŠè¦‹ã‚‹ã‚ˆã‚Šã‚‚ã“ã“ã®ãŒæ—©ã‹ã£ãŸã‚Šã€‚(w #ã¨äº‘ã†ã‹ã€2008/05/05 ä»˜ã‘ã§ 0075.0000 ã®è¨˜äº‹ãŒå† Post ã•ã‚Œã¦ã„ãŸã‚“ã§ã€‚> Lavasoft #éšæ‹“å–ã£ã¦ãŠã‘ã°è‰¯ã‹ã£ãŸã§ã™ã€‚ Microsoft Sysinternals Process Explorer ã« Debugging Tools for Windows ã‚’çµ„ã¿è¾¼ã‚“ã§ã€ã‚‚ã£ã¨è©³ã—ãã‚·ã‚¹ãƒ†ãƒ æƒ…å ±ã‚’è¡¨ç¤ºã•ã›ã‚‹æ–¹æ³•ã‚‰ã—ã„ã§ã™ã€‚ Microsoft http://tech net.microsoft.com/en-us/sysinternals/bb896653.aspx > Tech Net > TechCenters > Windows Sysinternals > Downloads > > Security Utilities > Proc
zonoise 2008/07/22
windows

Security

software

Process Explorer
ãƒªãƒ³ã‚¯
http://forums.spywareinfo.com/index.php?showtopic=57964&st=15
zonoise 2007/09/12
security
ãƒªãƒ³ã‚¯
ã‚ªãƒ©ã‚¯ãƒ«ã®ã€ŒJInitiatorã€ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è„†å¼±æ€§
United States Computer Emergency Readiness Teamï¼ˆUS-CERTï¼‰ã®å ±å‘Šæ›¸ã«ã‚ˆã‚‹ã¨ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶è€…ã‚‰ã¯ã€Oracleã®ã€ŒJInitiatorã€ãŒä½¿ç”¨ã™ã‚‹ActiveXã‚³ãƒ³ãƒˆãƒ¼ãƒ«ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è„†å¼±æ€§ã‚’ç™ºè¦‹ã—ãŸã¨ã„ã†ã€‚JInitiatorã¯ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒã‚¦ã‚§ãƒ–ãƒ–ãƒ©ã‚¦ã‚¶ä¸Šã§ã€ŒOracle Developer Serverã€ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’å®Ÿè¡Œã§ãã‚‹ã‚ˆã†ã«ã™ã‚‹ã‚‚ã®ã§ã‚ã‚‹ã€‚ US-CERTã®ãƒ¡ãƒ³ãƒãƒ¼ã‚‰ã«ã‚ˆã‚‹ã¨ã€ã“ã®è„†å¼±æ€§ã¯JInitiator 1.1.8.16ã¨ãã‚Œä»¥å‰ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«å˜åœ¨ã—ã¦ã„ã‚‹ã‚ˆã†ã ã¨ã„ã†ã€‚ã“ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è„†å¼±æ€§ã‚’æ‚ªç”¨ã™ã‚‹ã“ã¨ã§ã€æ”»æ’ƒè€…ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ã‚·ã‚¹ãƒ†ãƒ ã‚’é éš”ã‹ã‚‰åˆ¶å¾¡ã—ã€ä»»æ„ã®ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’å®Ÿè¡Œã§ãã‚‹ã‚ˆã†ã«ãªã‚‹ã€‚ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£èª¿æŸ»ä¼šç¤¾Secuniaã®æŠ•ç¨¿ã«ã‚ˆã‚‹ã¨ã€æ‚ªæ„ã®ã‚ã‚‹æ”»æ’ƒè€…ã¯ã€ã‚ã‚‹ç‰¹å®šã®åˆæœŸåŒ–ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã‚’Oracle JIni
zonoise 2007/09/08
Security
ãƒªãƒ³ã‚¯
ã‚¹ãƒ‘ã‚¤ã‚¦ã‚§ã‚¢DoubleClick - ï¼»LANï¼½All About
ã„ã¤ã‚‚è¦å‘Šãƒ€ã‚¤ãƒ¤ãƒã‚°ãŒè¡¨ç¤ºã•ã‚Œã‚‹ ç›¸è«‡è€…ï¼š ä»¥å‰ã€LANã‚µã‚¤ãƒˆã®è¨˜äº‹ã«ã‚ã£ãŸSpyBot - Search & Destroyã¨ã„ã†ã‚¹ãƒ‘ã‚¤ã‚¦ã‚§ã‚¢é§†é™¤ã‚½ãƒ•ãƒˆã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ã®ã§ã™ãŒã€æœ€è¿‘ã¡ã‚‡ã£ã¨å›°ã£ã¦ã„ã¾ã™ã€‚ ã‚¬ã‚¤ãƒ‰ï¼š å›°ã£ãŸã“ã¨ã¨ã¯ã©ã‚“ãªã“ã¨ã§ã™ã‹ï¼Ÿ ç›¸è«‡è€…ï¼š ç§ã¯ã€ãƒ‹ãƒ¥ãƒ¼ã‚¹ã‚’é…ä¿¡ã—ã¦ã„ã‚‹ãƒãƒ¼ã‚¿ãƒ«ã‚µã‚¤ãƒˆã‚’ãƒ–ãƒ©ã‚¦ã‚¶ã®æœ€åˆã«è¡¨ç¤ºã•ã‚Œã‚‹Webãƒšãƒ¼ã‚¸ã«ã—ã¦ã„ã¾ã™ã€‚ã„ã¤ã‚‚æœ€æ–°ã®ãƒ‹ãƒ¥ãƒ¼ã‚¹ã‚’è¦‹ã‚‹ã“ã¨ãŒã§ãã¦ã„ã„ã®ã§ã™ãŒã€ä»¥ä¸‹ã®ã‚ˆã†ãªè¦å‘ŠãŒæ¯Žå›žè¡¨ç¤ºã•ã‚Œã¦ãã®éƒ½åº¦[OK]ãƒœã‚¿ãƒ³ã‚’æŠ¼ã•ãªãã¦ã¯ã„ã‘ãªã„ã®ã§å›°ã£ã¦ã„ã¾ã™ã€‚ç„¡æ–™ã§ä½¿ãˆã‚‹é§†é™¤ã‚½ãƒ•ãƒˆãªã®ã§ãã®ç‚¹ã¯ã€æœ‰ã‚Šé›£ã„ã®ã§ã™ã‘ã‚Œã©ã‚‚ï¼Žï¼Žï¼Ž ã‚¬ã‚¤ãƒ‰ï¼š ãã®è¦å‘Šãƒ€ã‚¤ãƒ¤ãƒã‚°ã¯ã€SpyBotã®å…ç–«æ©Ÿèƒ½ã§è¡¨ç¤ºã•ã‚Œã‚‹ãƒ€ã‚¤ãƒ¤ãƒã‚°ã§ã™ã€‚å…ç–«ã§ã‚¹ãƒ‘ã‚¤ã‚¦ã‚§ã‚¢ãŒé®æ–ã•ã‚ŒãŸè¨³ã§ã™ãã€‚ã—ã‹ã—ã€æ¯Žå›žè¡¨ç¤ºã•ã‚Œã‚‹ã®ã‚‚ã€è€ƒãˆç‰©ãªã®ã§ã€ä»¥ä¸‹ã®ã‚ˆã†ã«ã—ã¦è¡¨ç¤ºã•ã‚Œãªã„ã‚ˆã†ã«ã—ã¦ãã
zonoise 2007/07/26
Security
ãƒªãƒ³ã‚¯
1