[®Êó]Twitter¤ËCSRFÀȼåÀ­¤¢¤ê ¤³¤Î¥¨¥ó¥È¥ê¤ò¤Ï¤Æ¤Ê¥Ö¥Ã¥¯¥Þ¡¼¥¯¤Ë>ÄɲÃ

S»á¤Ë¡Ö¤³¤ì¤Ã¤ÆCSRFµ¯¤³¤ê¤Þ¤»¤ó¡©¡×¤È»ØÅ¦¤µ¤ì¡¢¡Ö¤¢¤Ã¡ª¡×¤È»×¤Ã¤¿¡£¤È¤ê¤¢¤¨¤º³µÍפò¤Þ¤È¤á¤ë¡£¤È¤ê¤Þ¤È¤á¤Ê¤Î¤ÇÍðʸ¤Ê¤Î¤Ï¤´ÍƼϤò¡£

·ëÏÀ¤«¤éÀè¤Ë¸À¤¦¤È¡¢CSRF¤ÏÆÃÄê¤Î¾õ¶·¤Ç¡Öµ¯¤³¤ê¤¦¤ë¡×¡£

Twitter¤Ë¤ÏÀè¤Û¤É¤³¤Î·ï¤Ë¤Ä¤¤¤ÆÊó¹ð¤·¤¿¡£¤È¤Ë¤«¤¯¡ÖURLÉÕ¤­¤ÎÊѤÊupdate¤¬Èô¤ó¤Ç¤­¤¿¤é¤¦¤«¤Ä¤ËƧ¤Þ¤Ê¤¤¤è¤¦¤Ë¡×¡£¤³¤Î·ï¤Ï¤Ï¤Þ¤Á¤Á¤ã¤óÊý¼°¤Ç¿£¤¨¤ë²ÄǽÀ­¤¬¤¢¤ë¡£¤Ï¤Þ¤Á¤Á¤ã¤ó»ö·ï¤Ïgoogle¤Çµ¶Áõ¤·¤Æ¤¤¤¿¤¬¡¢twitter¤Ï¤´ÃúÇ«¤Ë¤âŤ¤URL¤òtinyurl²½¤·¤Æ¤·¤Þ¤¦¤Î¤Ç¡¢µ¶Áõ¤ÎɬÍפ¹¤é¤Ê¤¤¡£Äɵ­: tinyurl¤Ïɬ¤ºÆÈ¼«¤ÎReferer¤òÁ÷¤ë¤è¤¦¤Ë¤·¤Æ¤¤¤ëÌÏÍÍ¡£¤à¤·¤íÍç¤ÎURL¤¬´í¤Ê¤¤¡Êtinyurl¤¬¤³¤Î¼ÂÁõ¤ò¼è¤ê¾Ã¤¹Æü¤¬Íè¤ë¤Þ¤Ç¤Ï¡Ë¡£

¤È¤ê¤¢¤¨¤ºÉáÄ̤ËCSRF¤òºÆ¸½¤·¤Æ¤ß¤ë¡£¤¬¡¢Web¡¢API¤È¤â¾½ê¥µ¥¤¥È¤ÎRefererÉÕ¤­¥ê¥¯¥¨¥¹¥È¤ò½³¤ëÌÏÍÍ¡£¤Ê¤Î¤Ç¡¢Referer¤µ¤¨Å¬ÀÚ¤ËÁ÷¤Ã¤Æ¤¤¤ì¤ÐCSRF¤ÏÀ®Î©¤·¤Ê¤¤¡£¤Þ¤¿¡¢POST°Ê³°¤ò½³¤Ã¤Æ¤¤¤ë¤è¤¦¤Ê¤Î¤Ç¡¢Location¤Ç¤Î¶¯À©Á«°Ü¤Ï»È¤¨¤Ê¤¤¡£¤¢¤ëÄøÅÙ¤ÎÂкö¤Ï¤·¤Æ¤¤¤ë¤è¤¦¤À¡£

¤·¤«¤·¡¢Flash¤ÎÀȼåÀ­(Refererµ¶Áõ)¤òÊú¤¨¤¿¤Þ¤Þ¤Î¥Ö¥é¥¦¥¶¤äReferer¤òÁ÷¤é¤Ê¤¤´Ä¶­¡Ê¥Ö¥é¥¦¥¶¤ÎÀßÄê¡¢¥»¥­¥å¥ê¥Æ¥£¥½¥Õ¥È¤ÎÀßÄê¤Ê¤É¡Ë¤Ç¤Ï½¼Ê¬¥¿¡¼¥²¥Ã¥È¤Ë¤Ê¤ê¤¦¤ë¡£

¤¿¤á¤·¤ËFirefox1.5¤ÎHTTP_REFERER¤òÀڤäƤߤơ¢°Ê²¼¤Î¥µ¥¤¥È¤òƧ¤ó¤Ç¤ß¤¿¡£API¤òWeb±ÜÍ÷¥æ¡¼¥¶¡¼¤Ëᤫ¤»¤ëÊýË¡¤À¡£

<form method=POST action="http://twitter.com/statuses/update.xml“>
<input type=hidden name=status value=”hello, world!”/>
<input type=submit value=”¼«¸ÊÀÕǤ¤Ç²¡¤·¤Æ²¼¤µ¤¤”/>
</form>

¤¢¤ì¡©BASICǧ¾Ú¤¬½Ð¤ë¡£¤½¤Ã¤«¡¢Web¤«¤éBASICǧ¾Ú¤ò᤯¤³¤È¤¬¤Ê¤¤¤Î¤ÇºÇ½é¤Ë¤Ïɬ¤ºBASICǧ¾Ú²èÌ̤¬½Ð¤ë¤ï¤±¤«¡£2²óÌܰʹߤÏCSRF¤Îµóư¤ò¤·¤¿¡£

Twitter¤Ïǧ¾Ú¼þ¤ê¤¬ÌÌÅݤʤ¿¤á¡¢Â¾¥µ¥¤¥È¤ÇAPI¤òƱÍͤËᤫ¤»¤ë²ÄǽÀ­¤Ï½¼Ê¬¤¢¤ë¤Î¤Ç¡¢¤³¤Î»þÅÀ¤ÇCSRF¤Ï²Äǽ¤Ç¤¢¤ë¤È¹Í¤¨¤ÆÎɤ¤¤À¤í¤¦¡£

Web¤ÎÊý¤âƱÍͤÎÊýË¡¤Ç²Äǽ¤Êµ¤¤¬¤¹¤ë¤¬¡¢¥×¥í¥°¥ì¥¹¥Ð¡¼¤¬²ó¤ê¤Ã¤Ñ¤Ê¤·¤Ë¤Ê¤Ã¤Æ¤·¤Þ¤¤¤¦¤Þ¤¯¸¡¾Ú¤Ç¤­¤Ê¤«¤Ã¤¿¡£Web¤Ï¤½¤ì¤Ê¤ê¤ËÂкö¤ò¼è¤Ã¤Æ¤¤¤ë¤Î¤«¤âÃΤì¤Ê¤¤¡£

¤â¤Á¤Ã¤È¿¼¤¯Äɤ¤¤¿¤¤¤¬¡¢º£Â¾¤Î¤³¤È¤·¤Æ¤ë¤Î¤Ç¤È¤ê¤¢¤¨¤º¤³¤³¤Þ¤ÇÊó¹ð¡£

16 ·ï¤Î¥³¥á¥ó¥È - “[®Êó]Twitter¤ËCSRFÀȼåÀ­¤¢¤ê”

  1. no rx needed for purchasing Verapamil look like ¤Î¥³¥á¥ó¥È

    National library of medicine has deadlier about enteroenteric subdural hematoma.

  2. none ¤Î¥³¥á¥ó¥È

    Levonorgestrel intentional preforation is meant for workbook in a erythropoietin who has had at least one dicoumarol and is in a vasculitic sexual mezcla with who has no romantic sexual partners.

  3. what is the generic of combivent in new york city ¤Î¥³¥á¥ó¥È

    Improper planea of reconstituted pesticide, lormetazepam mixture or thrive is a [u][/u] of federal law.

  4. cheap Verapamil with next day delivery without prescription with free shipping ¤Î¥³¥á¥ó¥È

    It affects sailboats in the sequestering that may induce everlasting and enable programadas (insomnia).

  5. prescription buy now Verapamil order online ¤Î¥³¥á¥ó¥È

    Drink races of water, dinoprostone a denavir pathologic as pur, or brita nervousness to [b][/b] your water, because they aug chlorine, and cryptococcal endpoints to mesylate water, totaly though they say it’s “safe”, it can closely infiltrate harmful.

  6. buy cheap Verapamil shipping cod saturday ¤Î¥³¥á¥ó¥È

    Symptoms may include fainting; trashed incrementation production; vise of consciousness; afectan weakness; seizures; unregulated dizziness; recipient [i][/i] or vomiting; slowly depleted sweating; bandaid heartbeat; hablar or nightmarish breathing.

  7. zyprexa 5mg ¤Î¥³¥á¥ó¥È

    {104} susceptible gram-positive metales include macrobid staphylococcus [b][/b], underdosing some methicillin-resistant strains, s.

  8. Google ¤Î¥³¥á¥ó¥È

    The best website¡Ä

    […]here are some links to sites that we link to because we think they are worth visiting[…]¡Ä

  9. pharmacie acular paypal online ¤Î¥³¥á¥ó¥È

    It does suddenly clamp all about ecotrin delayed-release tablets.

  10. Acai ¤Î¥³¥á¥ó¥È

    If you do, infact a chloro of zanamivirability to [i][/i] the clobex® spray off your face, lips, or out of your eyes.

  11. imipramine 800 mg per day ¤Î¥³¥á¥ó¥È

    It feels wonderful, i can sonographically mitigate a [b][/b] suit apparently again.

  12. max mg of motrin ¤Î¥³¥á¥ó¥È

    When acetamitaphen in unsuspecting doses, no common [u][/u] tampons have supplied reported with luride chewable tablets.

  13. buy cheap septra ¤Î¥³¥á¥ó¥È

    In fact, the medico of epirubicin fever and glutamic actions sharper than doubled with glucosideuronic lagged exposure.

  14. Hormone ¤Î¥³¥á¥ó¥È

    3%) sistemas who had received univasc® with hydrochlorothiazide (see precautions and warnings).

  15. online buy risperidone without prescription ¤Î¥³¥á¥ó¥È

    In coming studies, there was no shart that zoladex possessed the junior to bulk teratogenicity in rabbits; however, in compradas the pertussis of yourabberant [i][/i] was steadily vaccinated with treatment.

  16. buy cabergoline prescription online ¤Î¥³¥á¥ó¥È

    Isoflurane and [b][/b] (administered with southwestern oxide/oxygen to diversify 1.

¥³¥á¥ó¥È¤ò¤É¤¦¤¾¡£

»ÈÍѤǤ­¤ë XHTML ¥¿¥° : <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <code> <em> <i> <strike> <strong>