[B! Security][Ruby] raimon49ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

raimon49 id:raimon49

Securityã¨Rubyã«é–¢ã™ã‚‹raimon49ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (16)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Pythonã¯äººæ°—ã®è¨€èªžã§ã™ã€‚ã—ã‹ã—ã€ãã®å‰²ã«PythonãŒæ°—è»½ã«åˆ©ç”¨ã§ãã‚‹ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒãƒ¼ã¯å°‘ãªã„æ„Ÿã˜ãŒã—ã¾ã™ã€‚ä½•æ•…ã€ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒãƒ¼ã¯Pythonã®åˆ©ç”¨ã«æ¶ˆæ¥µçš„ãªã®ã§ã™ã‹ï¼Ÿ
å›žç” (9ä»¶ä¸ã®1ä»¶ç›®) ã™ã§ã«ã€ã€Œãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒãƒ¼ã§ã‚‚Pythonã¯åˆ©ç”¨ã§ãã‚‹ã€ã¨ã„ã†å›žç”ãŒå¤šæ•°ã‚ã‚Šã¾ã™ã€‚ã“ã‚Œã¯äº‹å®Ÿã ã¨æ€ã„ã¾ã™ãŒã€ã—ã‹ã—åŒæ™‚ã«ã€ã€Œãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒãƒ¼ã¯Pythonã®åˆ©ç”¨ã«æ¶ˆæ¥µçš„ã€ã¨ã„ã†ã“ã¨ã‚‚äº‹å®Ÿã ã¨æ€ã„ã¾ã™ã€‚ãã®ç†ç”±ã‚’èª¬æ˜Žã™ã‚‹ã«ã¯ã€å°‘ã—ç´™é¢ã‚’è¦ã—ã¾ã™ã€‚ ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒãƒ¼ã¨ã¯ä½•ã‹ ãã‚‚ãã‚‚ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒãƒ¼ã¨ã¯ä½•ã‹ã‚’èª¬æ˜Žã—ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“ã€‚ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆé»Žæ˜ŽæœŸã«ã€å¤šãã®äººãŒã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä¸Šã«ã€Œãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ã€ã‚’å…¬é–‹ã—ãŸã„ã¨æ€ã„ã¾ã—ãŸãŒã€è‡ªç¤¾ã«ã‚µãƒ¼ãƒãƒ¼ã‚’æ§‹ç¯‰ã™ã‚‹ã®ã¯é¢å€’ã§ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®æ‡¸å¿µã‚„é‹ç”¨ç›£è¦–ç‰ã®èª²é¡Œã‚‚ã‚ã‚Šã€ãƒ‡ãƒ¼ã‚¿ã‚»ãƒ³ã‚¿ãƒ¼ã«ã‚µãƒ¼ãƒãƒ¼ã‚’ç«‹ã¦ã‚‹ã“ã¨ãŒä¸€èˆ¬çš„ã«ãªã‚Šã¾ã—ãŸ...
raimon49 2023/05/01
CGIã‚„PaaSã®ç´¹ä»‹ã‚‚äº¤ãˆãªãŒã‚‰ã€ã™ã”ãä¸å¯§ãªè§£èª¬ã§è¨€èªžåŒ–ã•ã‚Œã¦ã‚‹ã€‚ã‚ã‹ã‚Šã‚„ã™ã„ã€‚

Apache

FreeBSD

Linux

Security

Perl

PHP

Python

Ruby

WordPress

hosting
ãƒªãƒ³ã‚¯
Ruby 3.0 ãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ãƒ•ã‚§ãƒ¼ã‚ºã«ãªã£ãŸã®ã§ã„ãã¤ã‹è£œè¶³, snap ã¨ all-ruby ã‚’æ›´æ–°ã—ãŸ - HsbtDiary(2023-03-31)
â– Ruby 3.0 ãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ãƒ•ã‚§ãƒ¼ã‚ºã«ãªã£ãŸã®ã§ã„ãã¤ã‹è£œè¶³ Ruby 3.0 ãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ãƒ•ã‚§ãƒ¼ã‚ºã«ãªã£ãŸã“ã¨ã«åˆã‚ã›ã¦ã€ã„ãã¤ã‹ã‚µãƒ—ãƒ©ã‚¤ãƒã‚§ãƒ¼ãƒ³å‘¨ã‚Šã§è€ƒãˆã¦ãŠãå¿…è¦ãŒã‚ã‚‹äº‹é …ãŒã‚ã‚‹ã®ã§å…±æœ‰ã—ã¨ãã¾ã™ã€‚ Ruby 3.0 ã¯ OpenSSL 3.0 å¯¾å¿œã—ãªã„ã“ã¨ã«ãªã£ãŸ Bug #18658: Need openssl 3 support for Ubuntu 22.04 (Ruby 2.7.x and 3.0.x) - Ruby master - Ruby Issue Tracking System ã«æ›¸ã„ãŸã‚ˆã†ã«ã€Ruby 3.0 ã«ã¯ OpenSSL 3.0 ã«å¯¾å¿œã—ãŸ openssl gem ã¯ãƒãƒƒã‚¯ãƒãƒ¼ãƒˆã•ã‚Œãªã„ã“ã¨ã«ãªã‚Šã¾ã—ãŸã€‚ã¤ã¾ã‚Šã€OpenSSL 3.x ã—ã‹æä¾›ã•ã‚Œãªã„ Ubuntu 22.04 ã§ã¯ Ruby 3.0 ã¯ãƒ“ãƒ«ãƒ‰ã§ããª
raimon49 2023/03/31
OS

OSS

Ruby

Security

SSL

Ubuntu

support
ãƒªãƒ³ã‚¯
Homebrewã®Caskãƒªãƒã‚¸ãƒˆãƒªã‚’ä»‹ã—ãŸä»»æ„ã‚³ãƒ¼ãƒ‰å®Ÿè¡Œ
English version is available here: https://blog.ryotak.net/post/homebrew-security-incident-en/ (å…¬å¼ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆå ±å‘Šã¯ã“ã¡ã‚‰ã‹ã‚‰èªã‚€ã“ã¨ãŒã§ãã¾ã™: https://brew.sh/2021/04/21/security-incident-disclosure/) ã¯ã˜ã‚ã«Homebrewãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã¯HackerOneä¸Šã§è„†å¼±æ€§é–‹ç¤ºåˆ¶åº¦(Vulnerability Disclosure Program)ã‚’è¨ã‘ã¦ãŠã‚Šã€è„†å¼±æ€§ã®è¨ºæ–è¡Œç‚ºãŒè¨±å¯ã•ã‚Œã¦ã„ã¾ã™ã€‚ æœ¬è¨˜äº‹ã¯ã€å½“è©²åˆ¶åº¦ã«å‚åŠ ã—ã€Homebrewãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã®ã‚¹ã‚¿ãƒƒãƒ•ã‹ã‚‰è¨±å¯ã‚’å¾—ãŸä¸Šã§å®Ÿæ–½ã—ãŸè„†å¼±æ€§è¨ºæ–è¡Œç‚ºã«ã¤ã„ã¦è§£èª¬ã—ãŸã‚‚ã®ã§ã‚ã‚Šã€ç„¡è¨±å¯ã®è„†å¼±æ€§è¨ºæ–è¡Œç‚ºã‚’æŽ¨å¥¨ã™ã‚‹ã“ã¨ã‚’æ„å›³ã—ãŸã‚‚ã®ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ Homebrewã«è„†å¼±æ€§ã‚’ç™ºè¦‹ã—ãŸå ´åˆã¯ã€
raimon49 2021/05/03
CI

CodeReading

CodeReview

Mac

Ruby

Security

YAML

æ£è¦è¡¨ç¾
ãƒªãƒ³ã‚¯
CPUå¾‹é€ŸãªRuby/Pythonã‚³ãƒ¼ãƒ‰ã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆè¨å®šã®dockerä¸Šã§é…ããªã‚‹ - ã¾ã‚ã‚ã‚‚
English version è¦ç´„ dockerã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ©Ÿæ§‹ï¼ˆSpectreè„†å¼±æ€§ã®å¯¾ç–ï¼‰ã‚’æœ‰åŠ¹ã«ã—ã¾ã™ã€‚ã“ã®å½±éŸ¿ã§ã€Rubyã‚„Pythonã®ã‚ˆã†ãªã‚¤ãƒ³ã‚¿ãƒ—ãƒªã‚¿ã¯é€Ÿåº¦ãŒåŠ£åŒ–ã—ã¾ã™ã€‚ç‰¹ã«CPUå¾‹é€Ÿãªãƒ—ãƒã‚°ãƒ©ãƒ ã§é¡•è‘—ã«é…ããªã‚Šã¾ã™ï¼ˆå®Ÿè¡Œæ™‚é–“ãŒå€ãã‚‰ã„ã«ãªã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã™ï¼‰ã€‚ ç¾è±¡ Rubyã§1å„„å›žãƒ«ãƒ¼ãƒ—ã™ã‚‹ã‚³ãƒ¼ãƒ‰ã‚’ã€ç›´æŽ¥ãƒ›ã‚¹ãƒˆä¸Šã§å®Ÿè¡Œã™ã‚‹å ´åˆã¨ã€dockerä¸Šã§å®Ÿè¡Œã™ã‚‹å ´åˆã§å®Ÿè¡Œæ™‚é–“ã‚’æ¯”è¼ƒã—ã¦ã¿ã¾ã™ã€‚ ç›´æŽ¥ãƒ›ã‚¹ãƒˆä¸Šã§å®Ÿè¡Œã—ãŸå ´åˆï¼š $ ruby -ve 't = Time.now; i=0;while i<100_000_000;i+=1;end; puts "#{ Time.now - t } sec"' ruby 2.7.1p83 (2020-03-31 revision a0c7c23c9c) [x86_64-linux] 1.321703922 sec docker
raimon49 2020/05/23
CPU

Docker

Linux

Python

Ruby

Security

performance
ãƒªãƒ³ã‚¯
RubyGemãƒ‘ãƒƒã‚±ãƒ¼ã‚¸rest-clientã€ãƒãƒƒã‚¯ãƒ‰ã‚¢ã‚’å«ã‚€ãƒãƒ¼ã‚¸ãƒ§ãƒ³ãŒç«‹ã¦ç¶šã‘ã«å…¬é–‹ã•ã‚Œã‚‹ | ã‚¹ãƒ©ãƒ‰ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
RubyGemãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã€Œrest-clientã€ã®ãƒ¡ã‚¤ãƒ³ãƒ†ãƒŠãƒ¼ã®RubyGem.orgã‚¢ã‚«ã‚¦ãƒ³ãƒˆãŒä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã‚’å—ã‘ã€æ‚ªæ„ã‚ã‚‹ã‚³ãƒ¼ãƒ‰ã‚’å«ã‚€ãƒãƒ¼ã‚¸ãƒ§ãƒ³ãŒç«‹ã¦ç¶šã‘ã«å…¬é–‹ã•ã‚Œã¦ã„ãŸãã†ã (rest-client Issue#713ã€ The Registerã®è¨˜äº‹ã€ CVE-2019-15224)ã€‚ ä¸æ£ã«å…¬é–‹ã•ã‚ŒãŸã®ã¯ãƒãƒ¼ã‚¸ãƒ§ãƒ³1.6.10/1.6.11/1.6.12/1.6.13ã®4ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã€‚1.6.13ã§ã¯å¤–éƒ¨ã«ãƒ‡ãƒ¼ã‚¿ã‚’é€ä¿¡ã™ã‚‹ã‚³ãƒ¼ãƒ‰ã‚’pastebinã‹ã‚‰ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã—ã¦å®Ÿè¡Œã™ã‚‹ã‚³ãƒ¼ãƒ‰ãŒå«ã¾ã‚Œã¦ã„ãŸã¨ã„ã†ã€‚1.6.xç³»åˆ—ã¯2014å¹´ã«1.7.0ã§ç½®ãæ›ãˆã‚‰ã‚ŒãŸéžå¸¸ã«å¤ã„ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã€ä½•ã‚‰ã‹ã®ç†ç”±ã«ã‚ˆã‚Šæœ€æ–°ç‰ˆã¸ã‚¢ãƒƒãƒ—ã‚°ãƒ¬ãƒ¼ãƒ‰ã§ããªã„å ´åˆã®ãŸã‚ã«æ®‹ã•ã‚Œã¦ã„ã‚‹ã‚‚ã®ã ãŒã€1.6.13ã¯1,061å›žãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã•ã‚Œã¦ã„ãŸãã†ã ã€‚ ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã‚’å—ã‘ãŸãƒ¡ã‚¤ãƒ³ãƒ†ãƒŠãƒ¼ã®Hacker Newsã¸ã®æŠ•ç¨¿ã«
raimon49 2019/08/25
ï¼ž1.6.13ã§ã¯å¤–éƒ¨ã«ãƒ‡ãƒ¼ã‚¿ã‚’é€ä¿¡ã™ã‚‹ã‚³ãƒ¼ãƒ‰ã‚’pastebinã‹ã‚‰ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã—ã¦å®Ÿè¡Œã™ã‚‹ã‚³ãƒ¼ãƒ‰ãŒå«ã¾ã‚Œã¦ã„ãŸã¨ã„ã†ã€‚1.6.xç³»åˆ—ã¯2014å¹´ã«1.7.0ã§ç½®ãæ›ãˆã‚‰ã‚ŒãŸéžå¸¸ã«å¤ã„ãƒãƒ¼ã‚¸ãƒ§ãƒ³ / ã“ã‚Œã¯æ°—ä»˜ãè¾›ã„ã‚ˆãªã€‚

Gems

OSS

Ruby

Security
ãƒªãƒ³ã‚¯
RubyGems ã®è¤‡æ•°ã®è„†å¼±æ€§ã«ã¤ã„ã¦
Posted by usa on 29 Aug 2017 Ruby ã®æ¨™æº–æ·»ä»˜ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã§ã‚ã‚‹ RubyGems ã«ã€è¤‡æ•°ã®è„†å¼±æ€§ãŒç™ºè¦‹ã•ã‚Œã¾ã—ãŸã€‚ RubyGems ã®å…¬å¼ãƒ–ãƒã‚°ã«ã¦å ±å‘Šã•ã‚Œã¦ã„ã¾ã™ã€‚ è©³ç´° ä»¥ä¸‹ã®è„†å¼±æ€§ãŒå ±å‘Šã•ã‚Œã¦ã„ã¾ã™ã€‚ a DNS request hijacking vulnerability. (CVE-2017-0902) an ANSI escape sequence vulnerability. (CVE-2017-0899) a DoS vulnerability in the query command. (CVE-2017-0900) a vulnerability in the gem installer that allowed a malicious gem to overwrite arbitrary files. (CVE-2017-0901
raimon49 2017/08/30
DNS

Gems

Ruby

Security

patch
ãƒªãƒ³ã‚¯
ä¼æ¥ã¯å®‰æ˜“ãªMastodonã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã®é‹ç”¨ã‚’é¿ã‘ã‚‹ã¹ãã§ã¯? - ãŸã ã®ã«ã£ã(2017-04-21)
â– ä¼æ¥ã¯å®‰æ˜“ãªMastodonã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã®é‹ç”¨ã‚’é¿ã‘ã‚‹ã¹ãã§ã¯? ãŸã¾ã«ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¯ãƒ©ã‚¹ã‚¿çš„ãªã“ã¨ã‚’æ›¸ã„ã¦ã¿ã‚‹ã€‚æœ€åˆã¯ã€Œå®‰å…¨ãªMastodonã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã®é¸ã³æ–¹ã€ã¨ã„ã†ã‚¿ã‚¤ãƒˆãƒ«ã ã£ãŸã‚“ã ã‘ã©ã€Œå®‰å…¨ã¨å®‰å¿ƒã¯é•ã†ã—ãªãã€ã¨æ€ã„ã€ã€Œå®‰å¿ƒãªï½žé¸ã³æ–¹ã€ã«ã—ã¦ã„ãŸã‚“ã ãŒã€ã“ã“æ•°æ—¥ã§ã€Œä¼æ¥ã¯è‡ªç¤¾ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã‚’ç«‹ã¡ä¸Šã’ã‚‹ã¹ãï¼ã€ã¿ãŸã„ãªç…½ã‚Šã‚’ã‚ˆãç›®ã«ã™ã‚‹ã“ã¨ã«ãªã£ãŸã®ã§ã“ã†ã—ãŸã€‚ ã€ŒãŠã²ã¨ã‚Šã•ã¾ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã€ã‚’ç«‹ã¦ã‚‹è¨˜äº‹ãŒã„ãã¤ã‚‚æ›¸ã‹ã‚Œã€ã•ãã‚‰ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆãŒæä¾›ã™ã‚‹VPSã§ç°¡å˜ã«ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã‚’å‹•ã‹ã›ã‚‹ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’æä¾›ã•ã‚ŒãŸã‚Šã—ã¦ã€ã“ã®æ³¢ã«ã®ã£ã¦æˆ‘ãŒç¤¾ã‚‚å°‚ç”¨ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã‚’æŒã¨ã†ã£ã¦è€ƒãˆã¦ã‚‹ä¼æ¥ã¯å¤šã„ã¨æ€ã†ã€‚ã™ã§ã«ãƒ‹ãƒƒãƒãƒ³æ”¾é€ã®ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã€ŒTunerã€ã¿ãŸã„ãª(éžITç³»)ä¼æ¥ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ãŒã§ãå§‹ã‚ã¦ã„ã‚‹ã€‚ ãã‚Šã‚ƒãä»–äººãƒ»ä»–ç¤¾ãŒé‹ç”¨ã™ã‚‹ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã«ã‚¢ã‚«ã‚¦ãƒ³ãƒˆä½œã£ã¦ã€Œå…¬å¼ã§ã”ã–ã„ã€ãªã‚“ã¦ã™ã‚‹ã‚ˆã‚Šã€
raimon49 2017/04/22
ï¼žæœ¬æ¥ã§Railsã‚¢ãƒ—ãƒªã‚’é‹ç”¨ã—ã¦ã„ã‚‹Webä¼æ¥ãŒã€Rubyã¨Railsã‚’æœ€æ–°ã«ä¿ã¤ãŸã‚ã«æŠ•å…¥ã—ã¦ã„ã‚‹åŠ´åŠ›ãŒã©ã‚Œã ã‘å¤§ãã„ã‚‚ã®ã‹ / Rails + Node + Reactã¯åœ°ç„æ„Ÿã‚ã‚‹

OSS

OStatus

Security

Rails

Ruby

SNS

WordPress

node.js

patch

support
ãƒªãƒ³ã‚¯
Metasploit - Wikipedia
Metasploitã¯ã€ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã®ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã§ã€è„†å¼±æ€§ã€ãƒšãƒãƒˆãƒ¬ãƒ¼ã‚·ãƒ§ãƒ³ãƒ†ã‚¹ãƒˆã€ä¾µå…¥æ¤œçŸ¥ã‚·ã‚¹ãƒ†ãƒ ã€ã‚·ã‚§ãƒ«ã‚³ãƒ¼ãƒ‰ã®ã‚¢ãƒ¼ã‚«ã‚¤ãƒ–ã€ã‚¢ãƒ³ãƒãƒ•ã‚©ãƒ¬ãƒ³ã‚¸ã‚¯ã‚¹ï¼ˆè‹±èªžç‰ˆï¼‰ï¼ˆã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ãƒ»ãƒ•ã‚©ãƒ¬ãƒ³ã‚¸ã‚¯ã‚¹ã«ã‚ˆã‚‹è§£æžã¸ã®å¯¾æŠ—æŠ€è¡“ï¼‰ãªã©ã‚’ä¸»ãªå®ˆå‚™ç¯„å›²ã¨ã—ã¦ã„ã‚‹ã€‚ã¾ãŸã€æœ¬ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã®ãã®æˆæžœã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã¨ã—ã¦ã‚ˆãçŸ¥ã‚‰ã‚Œã‚‹Metasploit Frameworkã®çœç•¥åã¨ã—ã¦ã‚‚ã—ã°ã—ã°ç”¨ã„ã‚‰ã‚Œã‚‹[2]ã€‚æœ¬é …ã§ã¯ã€Metasploit Frameworkã‚’ä¸å¿ƒã«èª¬æ˜Žã™ã‚‹ã€‚ Metasploit Frameworkï¼ˆå˜ã«Metasploitã¨ç•¥è¨˜ã•ã‚Œã‚‹ã“ã¨ã‚‚ã‚ã‚‹ï¼‰ã¯ã€exploitã‚³ãƒ¼ãƒ‰ã®ä½œæˆã‚„å®Ÿè¡Œã‚’è¡Œã†ãŸã‚ã®ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã§ã‚ã‚‹ã€‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ¥ç•Œã§ã¯ã‚ˆãçŸ¥ã‚‰ã‚ŒãŸãƒ„ãƒ¼ãƒ«ã§ã‚ã‚Šã€ãƒšãƒãƒˆãƒ¬ãƒ¼ã‚·ãƒ§ãƒ³ãƒ†ã‚¹ãƒˆç›®çš„ã§ä½¿ç”¨å¯èƒ½ãª1DVDã‚¿ã‚¤ãƒ—ã®Linuxã§ã‚ã‚‹BackTrackã«åŽéŒ²ã•ã‚Œã¦ã„ã‚‹
raimon49 2016/04/27
ï¼žRubyã§é–‹ç™ºã•ã‚ŒãŸã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã¨ã—ã¦ã¯2011å¹´3æœˆæ™‚ç‚¹ã§ä¸–ç•Œæœ€å¤§è¦æ¨¡

OSS

Ruby

Security

Wikipedia
ãƒªãƒ³ã‚¯
Ruby 2.0.0 ãŠã‚ˆã³ Ruby 2.1 ã®ä»Šå¾Œã«ã¤ã„ã¦
Posted by usa on 24 Feb 2016 Ruby 2.0.0 ãŠã‚ˆã³ Ruby 2.1 ã®ä»Šå¾Œã®å…¬å¼ã‚µãƒãƒ¼ãƒˆã«ã¤ã„ã¦ãŠçŸ¥ã‚‰ã›ã—ã¾ã™ã€‚ Ruby 2.0.0 ã«ã¤ã„ã¦ ã‹ãã¦ã‹ã‚‰ã®äºˆå‘Šé€šã‚Šã€æœ¬æ—¥(2016å¹´2æœˆ24æ—¥)ã‚’ã‚‚ã£ã¦ã€Ruby 2.0.0 ã®å…¬å¼ã‚µãƒãƒ¼ãƒˆã¯çµ‚äº†ã¨ãªã‚Šã¾ã™ã€‚ ä»Šå¾Œã€ã‚ˆã‚Šæ–°ã—ã„ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã® Ruby ã§è¡Œã‚ã‚ŒãŸãƒã‚°ä¿®æ£ã‚„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¿®æ£ã¯ã€2.0.0 ã«ã¯ãƒãƒƒã‚¯ãƒãƒ¼ãƒˆã•ã‚Œãšã€ã¾ãŸã€2.0.0 ã®æ–°ã—ã„ãƒ‘ãƒƒãƒãƒªãƒªãƒ¼ã‚¹ã‚‚è¡Œã‚ã‚Œã¾ã›ã‚“ã€‚ ç¾åœ¨ã¾ã Ruby 2.0.0 ã‚’ä½¿ç”¨ã—ã¦ã„ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¯ã€é€Ÿã‚„ã‹ã«ã‚ˆã‚Šæ–°ã—ã„ãƒãƒ¼ã‚¸ãƒ§ãƒ³(2.3 ç‰)ã«ç§»è¡Œã™ã‚‹ã‚ˆã†å¼·ãæŽ¨å¥¨ã—ã¾ã™ã€‚ Ruby ã‚¤ãƒ³ã‚¿ãƒ—ãƒªã‚¿é–‹ç™ºè€…ã€ã‚ã‚‹ã„ã¯ä¼æ¥å†…ã§ Ruby ã‚¤ãƒ³ã‚¿ãƒ—ãƒªã‚¿ã®ä¿å®ˆã‚’æ‹…å½“ã•ã‚Œã¦ã„ã‚‹æ–¹ã§ã€ä»Šå¾Œã‚‚ Ruby 2.0.0 ã®å…¬å¼ãƒªãƒªãƒ¼ã‚¹ãŒç¶™ç¶šã•ã‚Œãªã„ã¨å›°ã‚‹ã€ã¨ã„ã†é©åˆ‡ãªç†ç”±ãŒã‚ã‚‹æ–¹ã¯ã€r
raimon49 2016/02/25
Ruby

Security

support
ãƒªãƒ³ã‚¯
(ç¿»è¨³) Ruby 2.2 ã®ã‚·ãƒ³ãƒœãƒ« GC - FIVETEESIXONE
Ruby 2.2 ã®æ–°æ©Ÿèƒ½ã«ã‚·ãƒ³ãƒœãƒ« GC ã¨ã„ã†ã‚‚ã®ãŒã‚ã‚Šã¾ã™ã€‚ æ£ç›´ã€ã€Œãˆã€ã‚·ãƒ³ãƒœãƒ«ã£ã¦ GC ã•ã‚Œãªã„ã‹ã‚‰é€Ÿã„ã‚“ã˜ã‚ƒãªã„ã®ï¼Ÿãªã®ã«ã‚·ãƒ³ãƒœãƒ« GC ã§ Rails ãŒé€Ÿããªã‚‹ã¨ã‹è©±èžãã‘ã©ã€ã„ã£ãŸã„ã©ã†ã„ã†ã“ã¨ãªã®ï¼Ÿã€ã¨ã„ã†æ„Ÿã˜ã§ã‚µãƒƒãƒ‘ãƒªç†è§£ã§ãã¦ãªã‹ã£ãŸã®ã§ã™ãŒã€ãã®è¾ºã‚Šã®ç–‘å•ã«å¯¾ã—ã¦ã¾ã¨ã‚ã‚‰ã‚Œã¦ã„ã‚‹è¨˜äº‹ãŒã‚ã‚Šã¾ã—ãŸã€‚ Symbol GC in Ruby 2.2 ã¨ã¦ã‚‚åˆ†ã‹ã‚Šã‚„ã™ãç´ æ™´ã‚‰ã—ã„è¨˜äº‹ã ã¨æ„Ÿã˜ãŸã®ã§ã€è¨±å¯ã‚’ã‚‚ã‚‰ã£ã¦ä»¥ä¸‹ã«æ—¥æœ¬èªžè¨³ã‚’å…¬é–‹ã—ã¾ã™ã€‚ Symbol GC in Ruby 2.2 ã‚·ãƒ³ãƒœãƒ« GC ã£ã¦ãªã«ï¼Ÿãã‚Œã£ã¦æ°—ã«ã—ãªãã¡ã‚ƒã„ã‘ãªã„ã“ã¨ãªã®ï¼Ÿ ãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸã°ã‹ã‚Šã® Ruby 2.2 ã®å¤§ããªæ–°æ©Ÿèƒ½ã¨ã—ã¦ã€Œã‚¤ãƒ³ã‚¯ãƒªãƒ¡ãƒ³ã‚¿ãƒ« GCã€ãŒæŒ™ã’ã‚‰ã‚Œã¾ã™ãŒã€ã‚‚ã†1ã¤ã®æ³¨ç›®ã™ã¹ãæ–°æ©Ÿèƒ½ãŒã€ã“ã®ã€Œã‚·ãƒ³ãƒœãƒ« GCã€ ã§ã™ã€‚ ã‚‚ã—ã‚ãªãŸãŒã“ã‚Œã¾ã§ Ruby ã®ä¸–ç•Œã§éŽã”ã—ã¦ããŸã®ãª
raimon49 2015/01/27
C

GC

Rails

Ruby

Security

memory

performance
ãƒªãƒ³ã‚¯
æ£è¦è¡¨ç¾ã«ã‚ˆã‚‹ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã§ã¯ ^ ã¨ $ ã§ã¯ãªã \A ã¨ \z ã‚’ä½¿ãŠã†
æ£è¦è¡¨ç¾ã«ã‚ˆã‚‹ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ç‰ã§ã€å®Œå…¨ä¸€è‡´ã‚’ç¤ºã™ç›®çš„ã§ ^ ã¨ $ ã‚’ç”¨ã„ã‚‹æ–¹æ³•ãŒä¸€èˆ¬çš„ã§ã™ãŒã€æ£ã—ãã¯ \A ã¨ \z ã‚’ç”¨ã„ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚Rubyã®å ´åˆ ^ ã¨ $ ã‚’ä½¿ã£ã¦å®Œå…¨ä¸€è‡´ã®ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã‚’è¡Œã†ã¨è„†å¼±æ€§ãŒå…¥ã‚Šã‚„ã™ã„ãƒ¯ãƒŠã¨ãªã‚Šã¾ã™ã€‚Perlã‚„PHPã®å ´åˆã¯ã€Rubyç¨‹ã§ã¯ã‚ã‚Šã¾ã›ã‚“ãŒä¸å…·åˆãŒç”Ÿã˜ã‚‹ã®ã§ \A ã¨ \z ã‚’ä½¿ã†ã‚ˆã†ã«ã—ã¾ã—ã‚‡ã†ã€‚ ã¯ã˜ã‚ã« å¤§åž£ã•ã‚“ã®ãƒ–ãƒã‚°ã‚¨ãƒ³ãƒˆãƒªã€ŒPHPerå‘ã‘ã€Ruby/Railsã®è½ã¨ã—ç©´ã€ã«ã¯ã€Rubyã®è½ã¨ã—ç©´ã¨ã—ã¦ã€å®Œå…¨ä¸€è‡´æ¤œç´¢ã®æŒ‡å®šã¨ã—ã¦ã€æ£è¦è¡¨ç¾ã® ^ ã¨ $ ã‚’æŒ‡å®šã™ã‚‹ä¾‹ãŒã€Ruby on Rails Security Guideã‹ã‚‰ã®å¼•ç”¨ã¨ã—ã¦ç´¹ä»‹ã•ã‚Œã¦ã„ã¾ã™ã€‚ä»¥ä¸‹ã®æ£è¦è¡¨ç¾ã¯ã€XSSå¯¾ç–ã¨ã—ã¦ã€httpã‚¹ã‚ãƒ¼ãƒ ã‚ã‚‹ã„ã¯httpsã‚¹ã‚ãƒ¼ãƒ ã®URLã®ã¿ã‚’è¨±å¯ã™ã‚‹æ£è¦è¡¨ç¾ã®ã¤ã‚‚ã‚Šã§ã™ã€‚ /^https?:\/\/[^\n]+$/
raimon49 2014/03/04
ï¼žRubyã®æ£è¦è¡¨ç¾æ©Ÿèƒ½ã¯ã€ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§è¤‡æ•°è¡Œãƒ¢ãƒ¼ãƒ‰ã§ã‚ã‚‹ / ã²ãƒ¼ã€‚çŸ¥ã‚‰ãªã‹ã£ãŸã€‚PHPã‚‚æœ«å°¾ãŒæ”¹è¡Œã‚³ãƒ¼ãƒ‰ã ã¨æŒ™å‹•ãŒå¤‰ã‚ã‚‹ã€‚

Security

PHP

Rails

Ruby

XSS

book

review

study

æ£è¦è¡¨ç¾
ãƒªãƒ³ã‚¯
Selfkleptomaniac â€” register_globalsï¼Ÿãã‚“ãªã®ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ã‚ªãƒ•ã§ã™ã‚ˆ
Blogging is a disease: selfkleptomania, your normal condition. About GPG Public Key Ruby on Railsã®mass assignmentçµ¡ã¿ã®è„†å¼±æ€§ã«ã¤ã„ã¦ã€ã™ã”ãã‚ˆãã¾ã¨ã¾ã£ãŸè¨˜äº‹ã€‚Railsã§é–‹ç™ºã—ã¦ã„ã‚‹äººã¯å¿…è¦‹ã§ã™ãã€‚ ã‹ã¤ã¦PHPã«ã¯register_globalsã¨ã„ã†ã“ã‚Œã¨ä¼¼ãŸæ©Ÿèƒ½ãŒã‚ã‚Šã€ç¾åœ¨ã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ã‚ªãƒ•ã‹ã¤5.4ä»¥é™ã¯å»ƒæ¢ã•ã‚ŒãŸã®ã§ã™ãŒã€ãã‚Œã¾ã§ã¯æ•£ã€…æã‚ã—ã„å•é¡Œã‚’å¼•ãèµ·ã“ã—ã¦ã„ã¾ã—ãŸã€‚PHPã®ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡ŒãŒå¤šã„ã¨ã„ã†è©•åˆ¤ãŒå®šç€ã—ã¦ã—ã¾ã£ãŸã®ã¯ã€ã“ã‚ŒãŒä¸»ãªåŽŸå› ã¨ã„ã£ã¦ã‚‚éŽè¨€ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚PHPã¯ä½•å¹´ã‚‚ã‹ã‘ã¦ã‚ˆã†ã‚„ãè² ã®éºç”£ã‚’è¿”æ¸ˆã™ã‚‹ã“ã¨ãŒã§ããŸã®ã§ã™ãŒã€Railsã«ã¯ã“ã®register_globalsç›¸å½“ã®æ©Ÿèƒ½ãŒã‚ã‚Šã€ä»Šå›žè¦‹ã¤ã‹ã£ãŸè„†å¼±æ€§ã¯ã‹ã¤ã¦PH
raimon49 2012/03/05
æ´å²ã¯ç¹°ã‚Šè¿”ã™ï½—

PHP

Ruby

Security

Rails
ãƒªãƒ³ã‚¯
http://blog.monoweb.info/article/2012021823.html
raimon49 2012/02/19
è‰¯è¨˜äº‹ã™ãŽã‚‹

Ruby

Sinatra

Security

XSS

CSRF

Apache

nginx

browser
ãƒªãƒ³ã‚¯
Ruby 1.9.2ãƒªãƒªãƒ¼ã‚¹ã¨WEBrickè„†å¼±æ€§å•é¡Œã®é¡›æœ« - è¥¿å°¾æ³°å’Œã®ã¯ã¦ãªãƒ€ã‚¤ã‚¢ãƒªãƒ¼
ã¯ã„ã€Ruby 1.9.2ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¾ã—ãŸãã€‚ã“ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã¯WEBrick ã«ã‚¼ãƒãƒ‡ã‚¤æ”»æ’ƒå¯èƒ½ãªè„†å¼±æ€§ - ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ãƒ‰ãƒƒãƒˆãƒ»ã‚¸ãƒ£ãƒ‘ãƒ³ã§ç´¹ä»‹ã•ã‚Œã¦ã„ã‚‹è„†å¼±æ€§ãŒåƒ•ãŒæ›¸ã„ãŸãƒ‘ãƒƒãƒã§ä¿®æ£ã•ã‚Œã¦ã„ã‚‹ã‚ã‘ãªã®ã§ã™ã‘ã©ã€ãã‚‚ãã‚‚ãªã‚“ã§åƒ•ãŒä¿®æ£ã—ã¦ã„ã‚‹ã®ã‹ã€ã£ã¦é¡›æœ«ãŒã‚ã‚Šã¨é¢ç™½ã„ã®ã§ç´¹ä»‹ã—ã¾ã™ã€‚ Appleã€upstreamã«å ±å‘Šã—ã¦ãã‚Œãªã„ã¾ã¾è„†å¼±æ€§ã‚’CVEã«å±Šã‘å‡ºã‚‹ upstreamã«é€£çµ¡ãŒæ¥ãªã„ã¾ã¾è„†å¼±æ€§ãŒå…¬é–‹ã•ã‚Œã‚‹ ruby-devã«AppleãŒæ›¸ã„ãŸã¨æ€ã‚ã‚Œã‚‹ãƒ‘ãƒƒãƒãŒè²¼ã‚‰ã‚Œã‚‹(Appleã§ãªã„äººé–“ã«ã‚ˆã£ã¦) ãƒ‘ãƒƒãƒã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ãŒä¸æ˜Žãªã®ã§å–ã‚Šè¾¼ã‚ãªã„ ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã‚’å•ã„åˆã‚ã›ã‚‹Appleã®çª“å£ãŒä¸æ˜Žãªã®ã§å•ã„åˆã‚ã›ã‚‚ã§ããªã„ ruby-devã‚’èªã‚“ã äººã¯ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ä¸Šå®‰å…¨ãªãƒ‘ãƒƒãƒã‚’æ›¸ã‘ãªã„ è„†å¼±æ€§ã ã‹ã‚‰è©±ã¯éžå…¬é–‹ã«é€²ã‚ãŸã„ yuguiã•ã‚“ãŒruby-devã‚’èªã‚“ã§ãªã„åƒ•ã«æ›¸ã‹ã›ã‚‹ã“ã¨ã«ã™ã‚‹
raimon49 2010/08/20
Apple

Security

Ruby

license

patch

study
ãƒªãƒ³ã‚¯
http://tokumaru.org/d/20090914.html
raimon49 2009/09/15
Security

æ–‡å—ã‚³ãƒ¼ãƒ‰

Perl

Ruby

Java

.NET

PHP
ãƒªãƒ³ã‚¯
ã©ã®è¨€èªžã§æ›¸ã„ã¦ã‚‚ãŠã‹ã—ãªã‚³ãƒ¼ãƒ‰ã‚’æ›¸ãå¥´ã¯æ›¸ã
Last Updated on: 2013å¹´12æœˆ1æ—¥# æ›¸ãã‹ã‘ã§ã™ã€‚å¾Œã§ç·¨é›†äºˆå®š ã€ŒWebå±‹ã®ãƒã‚¿å¸³ã€ã®ã©ã®è¨€èªžã§æ›¸ã„ã¦ã‚‚ãŠã‹ã—ãªã‚³ãƒ¼ãƒ‰ã‚’æ›¸ãå¥´ã¯æ›¸ãã«å¯¾ã™ã‚‹ã‚³ãƒ¡ãƒ³ãƒˆã§ã™ã€‚ãã®è¨˜äº‹ã«ã¯Rubyã®ã¾ã¤ã‚‚ã¨æ°ã®ãƒ–ãƒã‚°ã®å¼•ç”¨ã‚‚ã‚ã‚‹ã®ã§ãã¡ã‚‰ã«ã‚‚å¯¾ã™ã‚‹ã‚³ãƒ¡ãƒ³ãƒˆã§ã‚‚ã‚ã‚Šã¾ã™ã€‚ è¨€èªžãŒè‰¯ã„ã‚³ãƒ¼ãƒ‰ã‚’æ›¸ã‘ã‚‹ã‚ˆã†ã‚µãƒãƒ¼ãƒˆã™ã‚‹äº‹ã¯ã§ãã‚‹ã¨æ€ã„ã¾ã™ã€‚ã—ã‹ã—ã€è¨€èªžã ã‘ã«ã‚ˆã£ã¦è‰¯ã„ã‚³ãƒ¼ãƒ‰ï¼ˆå®‰å…¨ãªã‚³ãƒ¼ãƒ‰ã€ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ã—æ˜“ã„ã‚³ãƒ¼ãƒ‰ãªã©ï¼‰ãŒæ›¸ã‘ã‚‹ã‚ˆã†ã«ã¯ãªã‚‰ãªã„ã®ã§ã¯ãªã„ã§ã—ã‚‡ã†ã‹? è¨€èªžã ã‘ã§ã¯ä¸ååˆ†ã ã‹ã‚‰ã§ã™ã€‚ ã€Œã©ã®è¨€èªžã§æ›¸ã„ã¦ã‚‚ãŠã‹ã—ãªã‚³ãƒ¼ãƒ‰ã‚’æ›¸ãå¥´ã¯æ›¸ãã€ã¨ã¯æ˜”ã‹ã‚‰è¨€ã‚ã‚Œã¦ããŸäº‹ã§ã™ã€‚åŒã˜äººãŒãŠã‹ã—ãªã‚³ãƒ¼ãƒ‰ã‚’æ›¸ãã¤ã¥ã‘ã‚‹å ´åˆã‚‚ã‚ã‚‹ã¨ã¯æ€ã„ã¾ã™ãŒã€Œã©ã®è¨€èªžã®ãƒ¦ãƒ¼ã‚¶ã§ã‚‚ãŠã‹ã—ãªã‚³ãƒ¼ãƒ‰ï¼ˆå±é™ºãªã‚³ãƒ¼ãƒ‰ã§ã‚ã£ãŸã‚Šã€ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ãŒé›£ã—ã„ã‚³ãƒ¼ãƒ‰ã€ç„¡é§„ãŒå¤šã„ã‚³ãƒ¼ãƒ‰ï¼‰ã‚’æ›¸ãäººã¯ã„ã‚‹ã‚‚ã®ã ã€ã®æ„å‘³ã§ä½¿ã‚ã‚Œã¦ã„ã‚‹ã¨æ€ã„ã¾ã™ã€‚ è¨€
raimon49 2008/02/03
è¨€èªžã¨ã—ã¦ã®æŸ”è»Ÿã•ã€‚

PHP

Ruby

Rails

JavaScript

Java

Security

ã‚ã¨ã§èªã‚“ã
ãƒªãƒ³ã‚¯
1