[B! security] tomoemonã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

tomoemon id:tomoemon

securityã«é–¢ã™ã‚‹tomoemonã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (62)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

foræ–‡ç„¡é™ãƒ«ãƒ¼ãƒ—URLæŠ•ç¨¿ã§è£œå°Žã•ã‚ŒãŸä»¶ã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
2019å¹´3æœˆ4æ—¥ã€å…µåº«çœŒè¦å¯Ÿã¯ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆæŽ²ç¤ºæ¿ã«ä¸æ£ãƒ—ãƒã‚°ãƒ©ãƒ ã®URLã‚’æ›¸ãè¾¼ã‚“ã ã¨ã—ã¦æœªæˆå¹´è€…ã‚’å«ã‚€3åã‚’ä¸æ£æŒ‡ä»¤é›»ç£çš„è¨˜éŒ²ä¾›ç”¨æœªé‚ã®ç–‘ã„ã§å…ç«¥ç›¸è«‡æ‰€ã¸ã®é€šå‘Šã‚„æ›¸é¡žé€æ¤œã‚’è¡Œã†æ–¹é‡ã¨å ±ã˜ã‚‰ã‚Œã¾ã—ãŸã€‚ã“ã“ã§ã¯é–¢é€£ã™ã‚‹æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ ä¸æ£ãƒ—ãƒã‚°ãƒ©ãƒ ã¯foræ–‡ç„¡é™ãƒ«ãƒ¼ãƒ—ã‹ NHKå ±é“ã‹ã‚‰ã€å¼µã‚Šä»˜ã‘ã‚‰ã‚ŒãŸURLã§å‹•ä½œã™ã‚‹ã€Œä¸æ£ãƒ—ãƒã‚°ãƒ©ãƒ ã€ã¯foræ–‡ç„¡é™ãƒ«ãƒ¼ãƒ—ã¨ã¿ã‚‰ã‚Œã‚‹ã€‚*1 JavaScriptã‚’è¦‹ã‚‹é™ã‚Šã€ç‰¹æ®Šãªå®Ÿè£…ã‚„è„†å¼±æ€§ã‚’ç”¨ã„ãŸã‚‚ã®ã§ã¯ãªãã€foræ–‡ã®æ¡ä»¶å¼ãªã©ã‚’è¨˜è¿°ã›ãšã«ç„¡é™ãƒ«ãƒ¼ãƒ—ã•ã›ãŸã‚‚ã®ã€‚é¡”æ–‡å—ã‚„ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¯alertãƒ€ã‚¤ã‚¢ãƒã‚°ã‚’ä½¿ã£ã¦è¡¨ç¤ºã•ã›ã¦ã„ã‚‹ã€‚ å½“è©²URLã‚’é–‹ã„ãŸã‚¿ãƒ–ã‚’é–‰ã˜ã‚‹ãªã©ã®æ“ä½œãŒå¿…è¦ãªå ´åˆã‚‚ã‚ã‚‹ãŒã€æœ€æ–°ã®ãƒ–ãƒ©ã‚¦ã‚¶ï¼ˆChromeã€Firefoxãªã©ï¼‰ã§ã¯é–‹ã„ãŸã ã‘ã§è½ã¡ã‚‹ã“ã¨ã¯ãªã„ã€‚ URLæŠ•ç¨¿ã§æ‘˜ç™ºã•ã‚ŒãŸ3äºº æ¬¡ã®3äººãŒå•é¡Œã¨ãªã£ãŸURLã‚’æ›¸ãè¾¼ã‚“ã ã¨ã—ã¦å…ç«¥ç›¸
tomoemon 2019/03/05
security
ãƒªãƒ³ã‚¯
Timing Attacks in the Modern Web - tom.vg
Timing Attacks in the Modern WebThe Clock is Still Ticking 1 August 2016 Before you explore all the details of these browser-based timing attacks, head over to my laboratories to play around with these attacks yourself! Timing attacks have been known for a long time. One of the earliest, and possibly the most well-known attacks that leverage timing as side-channel information, are those reported b
tomoemon 2018/08/29
web

security
ãƒªãƒ³ã‚¯
https://ja.pcisecuritystandards.org/_onelink_/pcisecurity/en2ja/minisite/en/docs/PCI-DSS-v3_2-SAQ-A_EP.pdf
tomoemon 2017/05/26
ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰

security

æ±ºæ¸ˆ
ãƒªãƒ³ã‚¯
PCI_DSS_v3.pdf
tomoemon 2017/05/26
ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰

security

æ±ºæ¸ˆ
ãƒªãƒ³ã‚¯
Stop using JWT for sessions - joepie91's Ramblings
Update - June 19, 2016: A lot of people have been suggesting the same "solutions" to the probl ems below, but none of them are practical. I've published a new post with a slightly sarcastic flowchart - please have a look at it before suggesting a solution. Unfortunately, lately I've seen more and more people recommending to use JWT (JSON Web Tokens) for managing user sessions in their web applicati
tomoemon 2017/03/15
security
ãƒªãƒ³ã‚¯
pkiday_tls13.key
ClientHello ServerHello Certificate ServerHelloDone ClientKeyExchange ChangeCipherSpec Finished ChangeCipherSpec Finished Application Data Application Data ClientHello ServerHello EncryptedExtension ServerConfiguration Certificate CertificateVerify Finished ApplicationData Finished Application Data Application Data ClientHello Finished ApplicationData end_of_early_data ServerHello EncryptedExtensi
tomoemon 2016/07/05
TLS1.3 ã§ã”ã£ãã‚Šå¤‰ã‚ã‚Šãã†ã¨ã„ã†è©±

network

security
ãƒªãƒ³ã‚¯
ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã‚’é˜²æ¢ã™ã‚‹SSL/TLS
ã€Œä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã‚’é˜²æ¢ã™ã‚‹SSL/TLSã€ã®é€£è¼‰è¨˜äº‹ä¸€è¦§ã§ã™ã€‚
tomoemon 2016/07/05
"SHA256åŒ–"ãŒå«ã°ã‚Œã¦ä¹…ã—ã„ã‘ã©ã€è¨¼æ˜Žæ›¸ã®ç½²åã«ä½¿ã†ãƒãƒƒã‚·ãƒ¥ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã¨ SSL/TLS é€šä¿¡ã®ä¸ã§ä½¿ã† HMAC ã®ãƒãƒƒã‚·ãƒ¥ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã®ä½¿ã‚ã‚Œæ–¹ãŒã‚ˆãã‚ã‹ã£ã¦ãªã‹ã£ãŸã€‚æ˜”ã®è¨˜äº‹ã ã‘ã©ã‚ã‹ã‚Šã‚„ã™ã„

network

security
ãƒªãƒ³ã‚¯
ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã‚’é˜²æ¢ã™ã‚‹é€šä¿¡æŠ€è¡“(SSL)
ã€Œç›—è´ã€ã€Œæ”¹ã–ã‚“ã€ã€Œãªã‚Šã™ã¾ã—ã€ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆãŒæˆ‘ã€…ã®ç”Ÿæ´»åŸºç›¤ã¨ã—ã¦æµ¸é€ã™ã‚‹ã«ã¤ã‚Œã¦ã€å¤šãã®äººãŒãã®å®‰å…¨æ€§ã‚’é‡è¦è¦–ã™ã‚‹ã‚ˆã†ã«ãªã£ã¦ããŸã€‚ã„ã‚ã‚†ã‚‹é›»åå•†å–å¼•ï¼ˆECï¼‰ã¯ã‚‚ã¡ã‚ã‚“ã®ã“ã¨ã€å€‹äººé–“ã§ã®ç§çš„ãªæƒ…å ±ã®ã‚„ã‚Šã¨ã‚Šã«ãŠã„ã¦ã‚‚ã€ãã®é‡è¦æ€§ã¯æ—¥å¢—ã—ã«é«˜ã¾ã£ã¦ã„ã‚‹ã€‚ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®å®‰å…¨æ€§ã¨ã¯ä½•ã ã‚ã†ã‹ã€‚ãã‚Œã¯å¤§ãã3ã¤ã®ãƒã‚¤ãƒ³ãƒˆã«çµžã‚‰ã‚Œã‚‹ã€‚ é€šä¿¡ç›¸æ‰‹ã¯æœ¬äººã«é–“é•ã„ãªã„ã‹ é€šä¿¡å†…å®¹ãŒä»–äººã«ç›—ã¿èªã¾ã‚Œãªã„ã‹ é€šä¿¡ä¸ã«å†…å®¹ãŒæ”¹ã–ã‚“ã•ã‚Œã¦ã„ãªã„ã‹ ã§ã‚ã‚‹ã€‚ã“ã‚Œã‚‰ã®ãƒã‚¤ãƒ³ãƒˆãŒã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®å®‰å…¨æ€§ã‚’è€ƒãˆã‚‹ä¸Šã§é‡è¦ã¨ãªã‚‹è¨³ã¯ã€è©±ã‚’é›»è©±ã«ãŸã¨ãˆã¦ã¿ã‚‹ã¨åˆ†ã‹ã‚Šã‚„ã™ã„ã€‚ æ¬¡ã®å›³1ã§ã¯ã€å·¦ã®å¥³æ€§ãŒé€šä¿¡è²©å£²ä¼šç¤¾ã€ŒAtMarké€šè²©ã€ã«é›»è©±ã‚’ã—ã¦ã€ãŠæ°—ã«å…¥ã‚Šã®èµ¤ãƒ¯ã‚¤ãƒ³ã‚’1æœ¬ã€ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ã§è³¼å…¥ã—ã‚ˆã†ã¨ã—ã¦ã„ã‚‹ã€‚æ—¥å¸¸çš„ã«ã‚‚ã‚ˆãã‚ã‚‹ã‚·ãƒãƒ¥ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã ã€‚ã“ã®å›³ã®ä¸ã«ã¯ã€å‰å‡ºã®3ã¤ã®è¦³ç‚¹ã‹ã‚‰å®‰å…¨æ€§ã‚’æãªã†è¦ç´ ãŒç››ã‚Šè¾¼ã‚“ã§ã‚
tomoemon 2016/07/05
security

network
ãƒªãƒ³ã‚¯
Let's Encrypt ã‚’æ”¯ãˆã‚‹ ACME ãƒ—ãƒãƒˆã‚³ãƒ« - Block Rockinâ€™ Codes
Intro å…ˆæ—¥ #http2study ã§ mozilla ã® Richard Barnes ãŒ Let's Encrypt ã«ã¤ã„ã¦è©±ã—ã¦ãã‚Œã¾ã—ãŸã€‚ è³‡æ–™: Let's Encrypt Overview ã“ã®è³‡æ–™ã®ç¿»è¨³ ã¯ã—ãŸã®ã§ã™ãŒã€ã„ã‚‰ãªããªã£ã¦ã—ã¾ã£ãŸã®ã§ä¾›é¤Šã‚‚ã‹ãã¦ã“ã®ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã®ãƒ¢ãƒãƒ™ãƒ¼ã‚·ãƒ§ãƒ³ã¨ã€ Web ã§ãŠã“ã£ã¦ã„ã‚‹ HTTPS æŽ¨é€²ã®ãŸã©ã‚‹é“ã«ã¤ã„ã¦ã€è³‡æ–™ã‚’è£œè¶³ã—ã¤ã¤ç´¹ä»‹ã—ã¾ã™ã€‚ çµè«–ã‹ã‚‰è¨€ã†ã¨ Let's Encrypt ã¯ã‚‚ã¡ã‚ã‚“ ACME ãƒ—ãƒãƒˆã‚³ãƒ« ã«ã¤ã„ã¦ã‚‚æ˜¯éžçŸ¥ã£ã¦ãŠãã¨è‰¯ã„ã¨æ€ã„ã¾ã™ã€‚ HTTPS ã®å•é¡Œ ã™ã§ã«ã“ã®ãƒ–ãƒã‚°ã§ã‚‚ç´¹ä»‹ã—ã¦ã„ã‚‹ã‚ˆã†ã«ã€ Web ã«ãŠã‘ã‚‹ HTTPS ã®é‡è¦æ€§ã¯å¢—ã—ã€ãã‚Œã®æ™®åŠã‚’å¾ŒæŠ¼ã—ã™ã‚‹æ´»å‹•ãŒå„æ‰€ã§é€²ã‚ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ HTTPS åŒ–ã™ã‚‹ Web ã‚’ã©ã†è€ƒãˆã‚‹ã‹ ã‚ˆãè¨€ã‚ã‚Œã‚‹ç›—è´é˜²æ¢ã‚’å§‹ã‚ã€æš—å·åŒ–ã‚’è¡Œã†ã“ã¨ã§é˜²ã’ã‚‹å•é¡Œã¯å¤šãã‚
tomoemon 2015/12/18
security

web
ãƒªãƒ³ã‚¯
LINE Bug Bounty Programã«å ±å‘Šã—ã¦èªå®šã•ã‚Œãªã‹ã£ãŸè„†å¼±æ€§ï¼ˆ1ï¼‰ - Qiita
LINE Bug Bounty Programã«å‚åŠ ã—ãŸã€‚è„†å¼±æ€§ã¯ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã«é–¢ã™ã‚‹çŸ¥è˜ã§ã—ã‚‡ã†ã€‚ åˆ©ç”¨è¦ç´„ã®ç¬¬9æ¡ã«ã‚ˆã£ã¦ã€LINEãŒå…¬è¡¨ã™ã‚‹ã¾ã§ï¼ˆå ´åˆã«ã‚ˆã£ã¦ã¯å…¬è¡¨ã—ãŸå¾Œã‚‚ï¼‰è„†å¼±æ€§ã‚’å…¬é–‹ã™ã‚‹ã“ã¨ã¯ç¦æ¢ã•ã‚Œã¦ã„ã‚‹ã‘ã‚Œã©ã€è„†å¼±æ€§ã¨èªå®šã•ã‚Œãªã‹ã£ãŸå ´åˆã¯é©ç”¨å¯¾è±¡å¤–ã‚‰ã—ã„ã€‚LINEã«ç¢ºèªã—ãŸã€‚å¯©æŸ»ä¸å¯ã®é€šçŸ¥ã®ãƒ¡ãƒ¼ãƒ«ã¯ã€Œä»Šå›žã®è„†å¼±æ€§å ±å‘Šå¯¾è±¡ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€ã¨ã„ã†ãã£ã‘ãªã„æ„Ÿã˜ã ã£ãŸã‘ã©ã€èªå®šã•ã‚Œãªã‹ã£ãŸç†ç”±ã‚‚æ•™ãˆã¦ãã‚ŒãŸã€‚ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ ã¨ã„ã†ã“ã¨ã§ã€èªå®šã•ã‚Œãªã‹ã£ãŸè„†å¼±æ€§ã‚’ç´¹ä»‹ã™ã‚‹ã€‚ ã‚°ãƒ«ãƒ¼ãƒ—ãƒãƒ£ãƒƒãƒˆã§èª°ãŒæ—¢èªã«ã—ãŸã‹ã‚’çŸ¥ã‚‹ã“ã¨ãŒã§ãã‚‹ LINEã®ã‚°ãƒ«ãƒ¼ãƒ—ãƒãƒ£ãƒƒãƒˆã§ã¯ã€æ—¢èªã®äººæ•°ã®ã¿ãŒè¡¨ç¤ºã•ã‚Œã‚‹ã€‚ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¯èªã‚“ã ã®ãŒèª°ã‹ã¯åˆ†ã‹ã‚‰ãªã„ã¨ã„ã†æƒ³å®šã§ä½¿ã£ã¦ã„ã‚‹ã¯ãšã€‚Aã•ã‚“ã¯èª°ãŒæ—¢èªã«ã—ãŸã‹åˆ†ã‹ã‚‰ãªã„ã¨ã„ã†æƒ³å®šã§LINEã‚’ä½¿ã£ã¦ã„ã‚‹ã®ã«ã€Bã•ã‚“ãŒä½•ã‚‰ã‹ã®æ‰‹æ®µã§èª°ãŒæ—¢èªã«ã—ãŸã‹ã‚’çŸ¥ã‚‹ã“ã¨ãŒã§
tomoemon 2015/10/30
ã¸ã‡ "å®Ÿã¯ã€LINEã®ã‚µãƒ¼ãƒãƒ¼ã‹ã‚‰é£›ã‚“ã§ãã‚‹æ—¢èªé€šçŸ¥ã«ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼IDã‚‚è¼‰ã£ã¦ã„ã¦ã€èª°ãŒæ—¢èªã«ã—ãŸã‹ã‚’çŸ¥ã‚‹ã“ã¨ãŒã§ãã‚‹"

android

security
ãƒªãƒ³ã‚¯
AWS Security Best Practices
Archived AWS Security Best Practices August 2016 This paper has been archived. For the latest technical content on Security and Compliance, see https://aws.amazon.com/architecture/ security-identity-compliance/ Archived Notices Customers are responsible for making their own independent assessment of the information in this document. This document: (a) is for informational purposes only, (b) repres
tomoemon 2015/08/25
aws

security
ãƒªãƒ³ã‚¯
ä¼Šè±† å“²ä¹Ÿ - æ¥•å††æ›²ç·šæš—å·å…¥é–€ - researchmap
{{ it em.PressRelease.angular_publish_start }} â€” {{ it em.CategoriesLanguage.name }} {{ it em.PressRelease.research_area_discipline_text }} / {{ it em.PressRelease.research_area_it em_text }}
tomoemon 2015/01/20
æ¥•å††æ›²ç·šæš—å·å…¥é–€

æš—å·

security

text
ãƒªãƒ³ã‚¯
HSM ã‚’åˆ©ç”¨ã—ãŸ DNSSEC ã®é‹ç”¨ã«é–¢ã™ã‚‹è€ƒå¯Ÿ Â« DNSSECã‚¸ãƒ£ãƒ‘ãƒ³
DNSCheck[.SE] Test your DNS-server and find errors DNSSEC Debugger[VeriSign Labs] DNSSEC Validator[nic.cz] FireFox add-on DNSViz[Sandia National Laboratories] A DNS visualization tool OpenDNSSEC DNSSEC ã‚¸ãƒ£ãƒ‘ãƒ³ é‹ç”¨æŠ€è¡“ WG 1. ã¯ã˜ã‚ã« 1.1. èƒŒæ™¯ 2010å¹´7æœˆã®ãƒ«ãƒ¼ãƒˆã‚µãƒ¼ãƒãƒ¼å°Žå…¥ã‚’å¥‘æ©Ÿã«å°Žå…¥ãŒå§‹ã¾ã£ãŸDNSSECæŠ€è¡“ã§ã¯ã€ãƒ«ãƒ¼ãƒˆã‚¾ãƒ¼ãƒ³ã‚„å„TLDã®å¯¾å¿œã ã‘ã§ãªãã€æ¨©å¨DNSã‚µãƒ¼ãƒãƒ¼ã®å¯¾å¿œãŒå¿…è¦ä¸å¯æ¬ ã ãŒã€ãã®å°Žå…¥ã«ã¯æ§˜ã€…ãªãƒŽã‚¦ãƒã‚¦ãŒå¿…è¦ã¨ãªã‚‹ã€‚ ãã“ã§æˆ‘ã€…DNSSEC ã‚¸ãƒ£ãƒ‘ãƒ³ã§ã¯ã€æ¤œè¨¼ã‚„å°Žå…¥å®Ÿç¸¾ã«åŸºã¥ã„ãŸå„ç¨®ãƒŽã‚¦ãƒã‚¦ã‚’æ–‡æ›¸åŒ–ã—æä¾›ã—ã¦ããŸã€‚ ãã®ä¸€ç’°ã¨ã—ã¦æ¨©å¨DNSã‚µãƒ¼ãƒãƒ¼ã¸ã®
tomoemon 2015/01/19
dns

æš—å·

security
ãƒªãƒ³ã‚¯
è»½å¿«ãªscpã‹é«˜æ©Ÿèƒ½ãªsftpã€sshã‚µãƒ¼ãƒã«å‘ã„ã¦ã„ã‚‹ã®ã¯ï¼Ÿã€€â€•ï¼ IT
sshãƒ•ã‚¡ã‚¤ãƒ«è»¢é€2ã¤ã®æ–¹æ³•ã€scpã¨sftp scpã®ç‰¹å¾´ã¯ï¼Ÿ å›³1ã¯scpãŒå‹•ã„ã¦ã„ã‚‹ã¨ãã®ã‚¤ãƒ¡ãƒ¼ã‚¸ã‚’å›³ã«ã—ãŸã‚‚ã®ã§ã™ã€‚åˆ©ç”¨è€…ãŒã‚µãƒ¼ãƒã«ã‚ã‚‹ãƒ•ã‚¡ã‚¤ãƒ«ã‚’å–ã‚Šå‡ºã™æŒ‡å®šã‚’ã™ã‚‹ã¨ã€scpã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãƒ—ãƒã‚°ãƒ©ãƒ ã¯sshã‚µãƒ¼ãƒã«æŽ¥ç¶šã—ã¦ã€ã€Œã€Žè‡ªåˆ†ã‚ã¦ã«ãƒ•ã‚¡ã‚¤ãƒ«ã‚’é€ã‚‹ã€ã‚³ãƒžãƒ³ãƒ‰ã‚’èµ·å‹•ã—ãªã•ã„ã€ã¨ã„ã†å‘½ä»¤ã‚’é€ã‚Šã¾ã™ã€‚ å‘½ä»¤ã‚’å—ã‘å–ã£ãŸsshã‚µãƒ¼ãƒã¯ã€ã‚·ã‚§ãƒ«ã¨å‘¼ã°ã‚Œã‚‹ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’èµ·å‹•ã—ã€ãã®ã‚·ã‚§ãƒ«ãŒã€Œsshã®é€šä¿¡è·¯ã‚’ä½¿ã£ã¦ãƒ•ã‚¡ã‚¤ãƒ«ã‚’é€ã‚Šè¿”ã™ã€ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’èµ·å‹•ã—ã¾ã™ã€‚ã“ã‚Œã«ã¯scpã¨ã„ã†åå‰ã®ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’ä½¿ã„ã¾ã™ã€‚ãƒ—ãƒãƒˆã‚³ãƒ«ã¨åŒã˜åå‰ãŒä»˜ã„ãŸãƒ—ãƒã‚°ãƒ©ãƒ ã§ã™ã€‚ ã“ã®scpã¯æŒ‡å®šã®ãƒ•ã‚¡ã‚¤ãƒ«ã‚’èªã¿å‡ºã—ã¦ã€åŒã˜é€šä¿¡è·¯ã«æµã—è¾¼ã¿ã¾ã™ã€‚ã™ã‚‹ã¨ãã®ãƒ‡ãƒ¼ã‚¿ã¯scpã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«å±Šãã¾ã™ã€‚scpã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯ã“ã‚Œã‚’ä¿å˜ã—ã¦ã‚†ãã“ã¨ã§ã€ãƒ•ã‚¡ã‚¤ãƒ«è»¢é€ã‚’å®Ÿç¾ã—ã¾ã™ã€‚ ã“ã®ã¨ãscpã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãƒ—ãƒã‚°ãƒ©ãƒ ã¨sshã‚µãƒ¼ãƒãƒ—ãƒã‚°ãƒ©ãƒ
tomoemon 2014/03/07
linux

security
ãƒªãƒ³ã‚¯
ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒæ¼æ´©ã—ãªã„ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã®ä½œã‚Šæ–¹ ã€œ ã‚½ãƒ«ãƒˆã¤ããƒãƒƒã‚·ãƒ¥ã§æº€è¶³ã™ã‚‹å‰ã«è€ƒãˆã‚‹ã¹ãã“ã¨
â– â– åºè«– å¾³ä¸¸ã•ã‚“ã®ã‚¹ãƒ©ã‚¤ãƒ‰ã€Œã„ã¾ã•ã‚‰èžã‘ãªã„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®å–ã‚Šæ‰±ã„æ–¹ã€ã«è¦‹ã‚‰ã‚Œã‚‹ã‚ˆã†ã«ã€æ˜¨ä»Šã€ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è¨è¨ˆè¦ä»¶ã¨ã—ã¦ã€ã‚µãƒ¼ãƒå†…ã«ä¾µå…¥ã•ã‚ŒãŸå ´åˆã§ã‚‚ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ã§ãã‚‹ã ã‘ä¿è·ã™ã¹ãã¨ã„ã†è«–èª¿ãŒè¦‹å—ã‘ã‚‰ã‚Œã‚‹ã‚ˆã†ã«ãªã£ã¦ãã¾ã—ãŸã€‚ ä¸ŠæŽ²ã®ã‚¹ãƒ©ã‚¤ãƒ‰ã§ã¯ã€ãã®æ‰‹æ³•ã¨ã—ã¦ã‚½ãƒ«ãƒˆã¤ããƒãƒƒã‚·ãƒ¥åŒ–ã‚’å‹§ã‚ã¦ã„ã¾ã™ã€‚ã—ã‹ã—ãªãŒã‚‰ã‚¹ãƒ©ã‚¤ãƒ‰ã«æ›¸ã‹ã‚Œã¦ã„ã‚‹ã¨ãŠã‚Šã€ã‚½ãƒ«ãƒˆã¤ããƒãƒƒã‚·ãƒ¥ã«ã¯ã€è¤‡é›‘ãªãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®è§£èªã¯å›°é›£ã«ãªã‚‹ã‚‚ã®ã®ã€å˜ç´”ãªãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’è¨å®šã—ã¦ã—ã¾ã£ã¦ã„ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã«ã¤ã„ã¦ã¯ååˆ†ãªä¿è·ã‚’æä¾›ã§ããªã„ã¨ã„ã†å•é¡ŒãŒã‚ã‚Šã¾ã™ã€‚ãã—ã¦ã€å¤šãã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¯é©åˆ‡ãªãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰é‹ç”¨ãŒã§ããªã„ã€ã¨ã„ã†ã®ãŒæ‚²ã—ã„ç¾å®Ÿã§ã™ã€‚ ã‚½ãƒ«ãƒˆã¤ããƒãƒƒã‚·ãƒ¥ã‚’ä½¿ã£ãŸæ‰‹æ³•ã§ã“ã®ã‚ˆã†ãªå•é¡ŒãŒæ®‹ã‚‹ã®ã¯ã€ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚µãƒ¼ãƒã«ä¾µå…¥ã—ãŸæ”»æ’ƒè€…ãŒãƒ¦ãƒ¼ã‚¶ãƒ¼ã®èªè¨¼æƒ…å ±ã‚’ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã—ã¦ã€èªè¨¼æƒ…å ±ã‚’ã‚ªãƒ•ãƒ©ã‚¤ãƒ³æ”»æ’ƒã™ã‚‹ã“
tomoemon 2013/11/21
mysql

security
ãƒªãƒ³ã‚¯
ã‚ãªãŸã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã€ãƒãƒ¬ã¦ã¾ã™
tomoemon 2013/07/17
security
ãƒªãƒ³ã‚¯
ãã‚ãã‚ã€ŒZIPã§æš—å·åŒ–ã€ã®è¬Žæ–‡åŒ–ã‚’ãªãã—ãŸã„ - teruyastarã¯ã‹ãèªžã‚Šã
Twitter / dnobori: ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ZIPã§æš—å·åŒ–ã—ã€ã¾ãšZIPã‚’ãƒ¡ãƒ¼ãƒ«ã§é€ã‚Šã€ã—ã°ã‚‰ ... https://twitter.com/dnobori/status/346488232537632768 Daiyuu Nobori ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ZIPã§æš—å·åŒ–ã—ã€ã¾ãšZIPã‚’ãƒ¡ãƒ¼ãƒ«ã§é€ã‚Šã€ã—ã°ã‚‰ãã—ã¦åˆ¥ãƒ¡ãƒ¼ãƒ«ã§8æ–‡å—ç¨‹åº¦ã®ä¹±æ•°ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’é€ã‚‹ã¨ã„ã†è¬Žã®ãƒ—ãƒãƒˆã‚³ãƒ«ãŒæ—¥æœ¬ä¼æ¥ã§æµè¡Œã£ã¦ã„ã‚‹ãŒã€ZIPã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¯ç·å½“ãŸã‚Šã§ã‹ãªã‚Šé«˜é€Ÿã«è§£æžã§ãã‚‹ã—ã€ãã‚‚ãã‚‚ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ãƒ¡ãƒ¼ãƒ«ã§é€ã£ã¦ã„ã‚‹ã®ã§åŠ¹æžœãŒç–‘å•ã€‚ åƒ•ã‚‚æ˜”ãã®ã‚ˆã†ã«é€ã‚‰ã‚Œã¦ãã¦åŒã˜ç–‘å•ã‚‚ã£ãŸã“ã¨ã‚ã‚Šã¾ã™ã€‚ ã¯ã¦ãƒ–ã‚³ãƒ¡ãƒ³ãƒˆã¿ã‚‹ã¨ã€ 2åº¦é€ã‚‹ã“ã¨ã§ã‚ã¦å…ˆãƒŸã‚¹ã«ã‚ˆã‚‹æ·»ä»˜ã‹ã‚‰ã®æƒ…å ±æ¼ã‚Œã‚’é˜²ãã¨ã„ã†åŠ¹æžœã¯ãã“ãã“æœŸå¾…ã§ãã‚‹ã€‚ èª¤é€ä¿¡ã«ã‚ˆã‚‹ä¸€æ’ƒæ»ã‚’å…ã‚Œã‚‹ãŸã‚ã®ãƒ—ãƒãƒˆã‚³ãƒ«ã€‚ ã¾ãã§ã‚‚å®Ÿéš›ãƒ¡ãƒ¼ãƒ«ã‚„FAXã®èª¤çˆ†ã¨ã‹ã‚ˆãã‚ã‚‹äº‹ãªã‚ã‘ã§ã€‚ æš—å·ã®å¼·åº¦ã§ã¯
tomoemon 2013/06/25
security
ãƒªãƒ³ã‚¯
èªè¨¼å±€ã‚’ç«‹ã¦ã¦ã¼ã‚ã‚‚ã†ã‘ã—ãŸã„ã‚“ã§ã™ãŒï¼žç„¡ç†ãªç†ç”±ã‚’ç†è§£ã—ã‚ˆã† - Qiita
SSLã®èªè¨¼å±€ã¨ã‹è¨¼æ˜Žæ›¸ã¨ã‹å‹‰å¼·ã—å§‹ã‚ã¯ãƒ›ãƒ³ãƒˆé›£ã„ã‚ˆã ã“ã®ã¸ã‚“ã®SSL/TLSã®ä»•çµ„ã¿ã£ã¦å‹‰å¼·ã—å§‹ã‚ã®é ƒã¯å‡„ãé›£ã—ãæ„Ÿã˜ã‚‹ã®ã‚ˆãã€‚åˆ†ã‹ã‚Šã‚„ã™ãè§£èª¬ã—ã¦ãã‚Œã¦ã‚‹ã‚µã‚¤ãƒˆã£ã¦ã‚ã‚“ã¾è¦‹ãŸã“ã¨ç„¡ã„ã—ã€‚ ã‚“ã§ã€ >>300,304 ã¿ãŸã„ãªã“ã¨ã¯åƒ•ã‚‚æ˜”è€ƒãˆãŸã“ã¨ã‚ã£ãŸã‚ãƒ¼ã€ã¨æ‡ã‹ã—ã¿ã‚’è¦šãˆãŸã®ã§ãƒ¬ã‚¹ã£ã¦ã¿ãŸã€‚ è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã§ãã‚‹ã‹ã©ã†ã‹ã¯è¨¼æ˜Žæ›¸ã®ãƒ•ãƒ©ã‚°ã§æ±ºã¾ã£ã¦ã„ã‚‹ã€ã¨ã„ã† >>303 ã®æŒ‡æ‘˜ã‚‚é‡è¦ã‚ˆãã€‚ ä»¥ä¸‹2chã‚¹ãƒ¬ã‚ˆã‚Šå¼•ç”¨ ä¸å¯§éŽãŽã‚‹ã¨è©•åˆ¤ã®ãƒ¬ã‚¹ã‚’ã—ã¦ã‚‹ID:UyEJo1f2ãŒåƒ•ãªã‚ã‘ã ãŒï½—ã€€2chã ã¨ãã®ã†ã¡å€‰åº«ã«è¡Œã£ã¡ã‚ƒã†ã‹ã‚‚ã—ã‚Œãªã„ã®ã§ã“ã“ã«ãƒ¡ãƒ¢ã€‚ ã€èªè¨¼å±€ã€‘SSLã«é–¢ã™ã‚‹ã‚¹ãƒ¬ 2æžšç›®ã€ã¼ã‚å„²ã‘ã€‘ http://hayabusa6.2ch.net/test/read.cgi/mysv/1286532904/298-309 298 ï¼šDNSæœªç™»éŒ²ã•ã‚“ï¼š2013/05/31(é‡‘) 13:31
tomoemon 2013/06/05
security
ãƒªãƒ³ã‚¯
IPA ã‚»ã‚ãƒ¥ã‚¢ãƒ»ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°è¬›åº§
IPAã€€ç‹¬ç«‹è¡Œæ”¿æ³•äºº æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚»ãƒ³ã‚¿ãƒ¼ã«ã‚ˆã‚‹ã‚»ã‚ãƒ¥ã‚¢ãƒ»ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°è¬›åº§ï¼šWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ç·¨ & C / C++è¨€èªžç·¨
tomoemon 2013/02/03
programming

security
ãƒªãƒ³ã‚¯
éžæŠ€è¡“è€…ã®ãŸã‚ã®OAuthèªè¨¼(?)ã¨OpenIDã®é•ã„å…¥é–€ã€2023å¹´ç‰ˆã€‘
æ˜”ã‹ã‚‰ã€ã€ŒOpenIDã¯èªè¨¼ã§OAuthã¯èªå¯ã ã€ãªã©ã¨ã„ã†ã“ã¨ãŒè¨€ã‚ã‚Œã¾ã™ã€‚ã—ã‹ã—ã€ãã®è¨€èªžã®æ„å‘³ã‚’å–ã‚Šé•ãˆã¦ã„ã‚‹æ–¹ãŒçµæ§‹å¤šã„æ°—ãŒã—ã¦ã„ã¾ã™ã€‚ã€Œã‚‚ã†OpenIDãªã‚“ã¦ã„ã‚‰ãã€‚OAuthã ã‘ã§ã„ã„ã˜ã‚ƒã‚“ã€ã¨ã„ã†ã‚ˆã†ãªè¨€èª¬ãŒã‚ˆãæµã‚Œã¦ãã‚‹ã®ãŒãã®è¨¼æ‹ ã ã¨æ€ã„ã¾ã™ã€‚OAuthèªè¨¼ã¨ã„ã†ã®ã‚‚ãã®é¡žã§ã™ãã€‚ ãã“ã§ã€ä»Šæ—¥ã¯OAuthã¨OpenIDã®é•ã„ã‚’è€ƒãˆã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚ OpenIDã¯ç´¹ä»‹çŠ¶ã€OAuthã¯åˆéµ ã¾ãšã¯OpenIDã®æ¦‚è¦ã®å¾©ç¿’ã§ã™ã€‚ã€ŒOpenIDã¯èªè¨¼ã€ã¨ã„ã†è¨€è‘‰ã®å†…å®¹ã‚’ã¾ãšã¯å¾©ç¿’ã—ã¦ã¿ã¾ã—ã‚‡ã†ã€‚ ã€Œèªè¨¼ã€ã¨ã¯å¤§å¤‰åºƒã„è¨€è‘‰ã§ã„ã‚ã„ã‚ãªå ´é¢ã§ä½¿ã‚ã‚Œã¾ã™ãŒã€ã€ŒOpenIDã¯èªè¨¼ã€ã¨ã„ã†ä½¿ã„æ–¹ã®æ™‚ã¯ã€ã€ŒOpenIDã¯ã€ã„ã¾æ¥ã¦ã„ã‚‹äººã®èº«å…ƒã‚’èªè¨¼ã€ï¼ˆãƒ¦ãƒ¼ã‚¶èªè¨¼ï¼‰ã¨ã„ã†æ„å‘³ã§ã™ã€‚å›³ã«ã™ã‚‹ã¨å›³1ã®ã‚ˆã†ãªæµã‚Œã«ãªã‚Šã¾ã™ã€‚ ã“ã®ä¾‹ã§ã¯ã€æœ‰æ –ã•ã‚“ãŒãŠå®¢ã¨ã—ã¦ã‚µãƒ¼ãƒ“ã‚¹æä¾›ã‚’ã—ã¦ã„ã‚‹ã‚µã‚¤ãƒˆã§ã‚ã‚‹ä¼Š
tomoemon 2012/10/23
security

webã‚µãƒ¼ãƒ“ã‚¹

openid
ãƒªãƒ³ã‚¯
1 2 3 4 æ¬¡ã®ãƒšãƒ¼ã‚¸