ミクシィ、画像に認可制御なしの欠陥を改修できず、ヘルプで弁解@slashdot.jp いや、解決できるでしょ。http://www.mixi.jp/ にすれば。Mixiは会員のプライバシーよりURIの短さを優先したと思われても仕方ないのでは。今、http://www.mixi.jp/ にアクセスするとhttp://mixi.jp/にリダイレクトする（しかもこの2つFQDNの実体は同じ）ようになってるんだから逆もすぐできるでしょ？それがなぜできない。 ともかくMixiが、「ログインしていない人でも会員しか見られないはずのプライベートな画像を閲覧できてしまう脆弱性」に「ギブアップ」したそうだ。slashdot経由で非常に遠まわしな弁解文が見られる。以前、MixiとCookieドメインでMixiがおかしなCookie情報の改変をしたことは既に書いたが、こういった背景があったとは恥ずかしながら
タグ
- すべて
- 1.9 (1)
- 1000speakers (3)
- 1977 (1)
- 197xs (1)
- 1981 (1)
- 1981s (5)
- 2048game (1)
- 2ch (22)
- AKB48 (1)
- ActionMailer (1)
- ActiveDirectory (1)
- DNS (3)
- FastCGI (5)
- FriendFeed (1)
- GTD (8)
- Google Reader (1)
- Google+ (1)
- Greasemonkey (1)
- Kantara (1)
- LINDBERG (1)
- Macintosh (1)
- NTT (1)
- OpenID connect (2)
- Plagger (1)
- RandomNote (1)
- RubyKaigi (6)
- RubyKaigi2011 (3)
- SIer (70)
- Subversion (29)
- UTF-8 (1)
- Xperia (1)
- accessibility (1)
- acecombat (1)
- activeldap (1)
- activerecord (1)
- activeresource (1)
- acts_as_authenticated (1)
- adsense (2)
- agile (7)
- air (5)
- ajax (10)
- akismet (1)
- algorithm (3)
- amachang (19)
- amazon (14)
- ameblo (3)
- analytics (3)
- android (14)
- aol (1)
- apache (28)
- api (5)
- apollo (8)
- apop (3)
- appengine (2)
- apple (18)
- asp (1)
- assets (1)
- async.js (3)
- atok (4)
- atom (9)
- atompp (2)
- atompub (4)
- attack (1)
- augeas (1)
- auth (58)
- authentication (6)
- aws (1)
- basecamp (1)
- bash (1)
- bd (1)
- berkeleydb (2)
- bigtable (1)
- blog (50)
- bogusnews (1)
- book (72)
- bookmark (7)
- bookmarklet (2)
- bootcamp (1)
- bpm (1)
- browserid (5)
- bts (1)
- business (183)
- c++ (2)
- c10k (1)
- cache (1)
- cafe (1)
- calendar (4)
- camera (2)
- capistrano (5)
- capping (8)
- captcha (7)
- car (1)
- cardspace (2)
- cc (4)
- centos (1)
- cfengine (1)
- cgm (1)
- chat (1)
- chef (3)
- chrome (7)
- chrome os (1)
- ci (1)
- closure (2)
- cm (2)
- coderepos (9)
- column (1)
- comet (6)
- comic (1)
- comment (2)
- communication (65)
- community (3)
- company (1)
- cookie (8)
- copyright (48)
- coreos (3)
- cpan (3)
- cpi (4)
- credit (1)
- crossdomain (7)
- crypt (13)
- csrf (7)
- css (10)
- cssnite (5)
- cssxss (1)
- culture (3)
- curl (1)
- dankogai (34)
- database (11)
- databases (7)
- date (2)
- db (9)
- ddos (1)
- debian (5)
- debug (3)
- del.icio.us (1)
- delicious (1)
- design (7)
- desktop (1)
- development (74)
- devise (1)
- diff (4)
- diffstat (1)
- docker (3)
- docomo (5)
- dom (1)
- dreamhost (1)
- drive (1)
- drm (1)
- dropbox (3)
- dropdb (16)
- dtrace (1)
- ducktyping (1)
- ec2 (2)
- eclipse (7)
- ecology (3)
- economics (1)
- economy (4)
- editor (2)
- education (8)
- ejb (7)
- encoding (5)
- engineer (1)
- english (6)
- enterprise (8)
- erubis (4)
- essa (7)
- estraier (5)
- eva (3)
- event (46)
- evernote (5)
- excel (6)
- exploit (1)
- extension (2)
- f1 (93)
- facebook (6)
- facelets (2)
- feed (4)
- felica (2)
- finance (3)
- find (3)
- firebug (2)
- firefox (17)
- fizzbuzz (2)
- flash (1)
- flickr (18)
- flickr2blog (2)
- foaf (3)
- font (1)
- food (4)
- framework (2)
- freebsd (1)
- freemarker (1)
- friend connect (3)
- friendconnect (5)
- fromdusktildawn (1)
- fuji (1)
- gae (13)
- game (103)
- gcc (1)
- gdata (2)
- gem (3)
- generics (2)
- geo (1)
- geotagged (2)
- gigazine (2)
- gihyo.jp (5)
- git (21)
- github (12)
- global (2)
- gmail (10)
- gnip (1)
- goo (3)
- google (82)
- google app engine (5)
- graph (3)
- gui (2)
- h-index (6)
- hash (8)
- hatena (85)
- hatenastar (7)
- hatenaster (11)
- help (2)
- heroku (2)
- hibernate (3)
- history (2)
- hosting (6)
- htaccess (2)
- html (8)
- http (7)
- hyuki (19)
- idcon (17)
- identity (20)
- ie (2)
- installer (5)
- interface (2)
- interview (7)
- ipad (2)
- iphone (35)
- ipod (10)
- itc2007 (20)
- itpro (6)
- itprochallenge (61)
- java (122)
- java-ja (2)
- javascript (98)
- jboss (12)
- jdbc (2)
- jpa (14)
- jquery (4)
- jruby (4)
- jsf (7)
- json (8)
- jsonp (15)
- kosencon-tokyo03 (26)
- kyoto (3)
- language (2)
- law (3)
- ldap (6)
- ldr (2)
- liberty (3)
- license (3)
- life (17)
- lifehack (3)
- lighttpd (8)
- lingr (11)
- linux (28)
- linuxsymposium2008 (9)
- lisp (2)
- livedoor (5)
- log (3)
- logic (4)
- m17n (3)
- mac (58)
- mail (3)
- mala (6)
- management (3)
- manual (5)
- masuidrive (6)
- math (2)
- matz (7)
- maven2 (3)
- md5 (11)
- media (7)
- memory (3)
- merb (8)
- mercurial (7)
- mgs4 (3)
- microsoft (3)
- mixi (38)
- mobile (48)
- mod_proxy_balancer (2)
- money (2)
- mongrel (2)
- movie (15)
- music (14)
- mutual (3)
- mysql (13)
- neta (10)
- netwatch (4)
- network (5)
- news (6)
- ngn (2)
- niconico (70)
- nicovideo (6)
- nintendo (4)
- nipotan (2)
- node.js (5)
- nsw (10)
- oauth (107)
- office (2)
- omniauth (7)
- oop (2)
- openid (363)
- opensocial (20)
- openssl (2)
- opensso (3)
- opneid (3)
- oss (10)
- p2p (3)
- pake (3)
- pape (2)
- passenger (3)
- password (6)
- pathtraq (4)
- performance (26)
- perfume (3)
- perl (36)
- photo (6)
- php (60)
- pipes (3)
- plugin (7)
- pointer (2)
- politics (12)
- port801 (2)
- ports (2)
- postgresql (2)
- preformance (2)
- presentation (15)
- privacy (21)
- programming (154)
- prototype.js (4)
- ps3 (5)
- pubsubhubbub (3)
- pukiwiki (4)
- puppet (3)
- python (6)
- rack (12)
- rails (169)
- redmine (4)
- reference (13)
- reputation (5)
- research (4)
- rest (13)
- restful_authentication (2)
- review (4)
- rspec (10)
- rss (14)
- ruby (208)
- ruby1.9 (8)
- rubykaigi2007 (3)
- rubykaigi2008 (3)
- rubykaigi2009 (7)
- saas (5)
- safari (3)
- sakura (6)
- saml (12)
- scalability (3)
- science (2)
- scis2008 (3)
- scm (3)
- screen (4)
- seam (11)
- seasar (2)
- security (344)
- self (25)
- seo (4)
- server (8)
- service (8)
- session (2)
- sha1 (4)
- shibuya.pm (3)
- shibuya.trac (14)
- sinatra (9)
- sleipnir (3)
- slideshare (2)
- sns (11)
- soap (6)
- social (17)
- socialgraph (2)
- socialweb (4)
- society (6)
- softbank (2)
- solaris (2)
- sox (2)
- spam (15)
- speedway (14)
- sports (9)
- spring (2)
- sql (3)
- sqlite (2)
- ssh (5)
- ssl (8)
- sso (4)
- streetview (5)
- struts (7)
- struts2 (11)
- study (8)
- sun (3)
- svn (2)
- systemd (2)
- tbs (7)
- tdd (11)
- tdiary (73)
- telnet (2)
- template (2)
- terakoya (4)
- test (8)
- textdrive (5)
- think (18)
- thunderbird (3)
- tidd (6)
- tips (107)
- tomcat (2)
- tool (17)
- trac (50)
- tracoff (5)
- travel (2)
- trouble (7)
- tumblr (3)
- tuning (3)
- tutorial (5)
- tv (2)
- twitter (71)
- ubuntu (2)
- ui (25)
- unicode (6)
- university (2)
- unix (5)
- usability (2)
- vim (21)
- virus (2)
- vocaloid (22)
- vox (2)
- vps (8)
- wassr (2)
- web (19)
- web+db press (5)
- web2.0 (19)
- webapi (27)
- webservice (20)
- wii (14)
- wiki (18)
- wikibana (7)
- wikipedia (8)
- windows (23)
- winny (5)
- work (11)
- writing (12)
- ws-security (2)
- wsse (3)
- xml (4)
- xss (4)
- yadis (2)
- yahoo (7)
- yappo (7)
- youtube (22)
- zsh (4)
- あとで書く (53)
- あとで見る (4)
- あとで読む (39)
- お土産 (2)
- これはすごい (2)
- さくら (3)
- デブサミ (2)
- ネタ (6)
- リテラシー (17)
- 地名しりとり (2)
- 後で読む (6)
- 携帯 (2)
- 日記 (132)
- 暗号 (2)
- 椎名林檎 (2)
- 言及 (4)
- 高専カンファレンス (3)
- openid (363)
- security (344)
- ruby (208)
- business (183)
- rails (169)
- programming (154)
- 日記 (132)
- java (122)
- oauth (107)
- tips (107)
mixiとcookieに関するkmachuのブックマーク (1)
-
kmachu 2006/10/20
『Cookieのドメインを「.mixi.jp」にすればhttp://mixi.jp/にCookieが飛ばなくなってしまう』- mixi
- cookie
リンク -
1
公式Twitter
- @HatenaBookmark
リリース、障害情報などのサービスのお知らせ
- @hatebu
最新の人気エントリーの配信
処理を実行中です
キーボードショートカット一覧
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
設定を変更しましたx