セキュリティホールの指摘を受け、修正を行いました

ケイスです。

ユーザの方から、先ほどセキュリティホールの可能性があることを教えていただきました。

「電脳ニュース」のリンクに、ドコモの携帯以外の端末から見たときは不必要な暗号化された
セッションコードを受け渡してしまっていました。

このセキュリティホールそのものは、パスワードを奪われたりするものではありませんが、第三者が
リファラーでそのURLを見てしまうと、それを使ってその人になりすまして書込ができてしまうというものでした。

この問題について、以下の対処を行いました。

(1)ドコモの携帯端末以外でのセッションコードの引き継ぎをやめる
(ドコモの端末はリファラーが残らない上、端末IDの取得方法が特殊なため、
セッションコードの発行が必須になります。ただし、ドコモ端末にはリファラーが
のこらないのでセキュリティホールにはなりません)

(2)既存のリファラー対策として、暗号化キー(非公開)の変更を行う

是に伴い、各ユーザに紐づけられていたメール投稿アドレスが変更になりました。

皆様にご迷惑をおかけしたことを謹んでお詫び申し上げます。

Comments

[投稿情報: きむらんらん]

そーだったんですか！

どうりでメール更新ばっかしてたのが反映してないなーと思ったんですよ。
アドレス更新しておきまーす。

[投稿情報: 5mw green laser pointer for sale]

Many thanks making to go over this amazing, I am frankly into it and so love looking at more to do with this process niche. In the case achievable, just like you create ability, on earth do you beliefs replacing your entire website with the in addition important info? This is useful for for me.

[投稿情報: gjraoyyh]

Four days after that, he was released from the hospital and his wife helped him set up a command center at his home in Charlotte to keep tabs on his team back in Denver. moncler offerte The two teams face each other again on Feb. 6 in a meeting that could be even more meaningful than this one. o moncler 2011 Defenseman Cory Sarich, a late scratch at Chicago, also because of back issues, "will be out indefinitely," Roy said. outlet online moncler Saint Mary's got off to a good start this season with nine straight wins, including a road victory over a well-regarded Boise State team. Then things got messy: The Gaels lost three times at the Diamond Head Classic in Hawaii, and last week they got knocked around in a 73-51 road loss to a Gonzaga team beset by injuries. The money comes as the fulfillment of a promise between the federal government and American Indian and Alaska Native Tribes in the Indian Self-Determination Act of 1975. The act stipulates that when Native corporations invest private funding in the creation of health centers the federal government will provide funding for staffing and operating health care programs in those centers. piumini donna moncler in vendita, giubbotti moncler bambino vendita! spaccio aziendale moncler vendita! AARP TAX-AIDE: Tax counselors, greeters needed p www.vocidallastrada.com/dalla.php?p=162 Torre and MLB executive Tony La Russa, both ex-managers, joined Schuerholz on the replay committee. Pi霉 tardi outlet moncler on line per gli uomini e le donne per la vendita on-line. moncler giubbotto uomo | cappotti moncler Ehrlich wouldn't say which Beatles tune the British duo would perform, but John Mayer and Keith Urban will pair up to perform "Don't Let Me Down," while Alicia Keys and John Legend will perform a duet on "Let It Be." Maroon 5 also will hit the stage. n SOCCER Channel prezzo moncler Howard recognized Zuccarello's intention, he just couldn't stop it. giubbotto moncler donna A staggering 55 goals later, Miracle has turned the rest of the area into believers as well. sito ufficiale moncler Font Resize http://www.vocidallastrada.com/dalla.php?p=35 "It is important not to prohibit or inhibit conduct that is efficiency producing and competition enhancing," . "It also is important not to permit conduct that reduces efficiency, competition and utility, including the values that go beyond the material." moncler popstar Anastasia Pavlyuchenkova said it was "ridiculous" to have played outdoors Thursday morning. q moncler bambino milano Washington's estimate is that average fish consumption amounts to just 8 ounces roughly one fillet per person, per month. Environmental groups are pushing federal and state officials to adopt more realistic estimates, something that could force changes in water quality rules. moncler donna Sanchez's struggle was palpable. While the vast majority of Sanger students are Latino, most of the children around her spoke English, a language she did not understand. She had few friends, had an especially hard time writing in complete sentences and expressing what she wanted to say. Her report cards showed very low grades. Stations proposed for 2015-2020: Six locations to be determined. www.vocidallastrada.com/dalla.php?p=120 Jan. 31: Corona del Mar at Irvine Since the first Mr. Seminole award was presented to Jesse Johnson, a pioneer of the city, in 1965, the chamber has dedicated itself to annually honoring significant contributors to the community. However, Stern said, those honored typically have belonged to the chamber or one of the other major organizations in Seminole, namely the two Rotary Clubs and the two Kiwanis Clubs. http://www.vocidallastrada.com/dalla.php?p=62 A: We are currently finishing out the fall shows Denver Rock n Roll Marathon and a show with Rusted Root and the Las Vegas Rock n Roll Marathon in November. Then into the studio to record an all new all original studio album scheduled for release spring of 2014. Then we will tour the western states to support that album Spring/Summer 2014. Biggert-Waters, which aims to reduce a $24 billion deficit in the federal program, allows premiums for residential property to rise to market rates. moncler outlet serravalle ARF pet foster orientation 10 a.m. Jan. 25, 2890 Mitchell Drive, Walnut Creek. Learn about caring for dogs, cats, kittens, puppies in your home. Free, no obligation. 925-256-1273, . v Walrus and Carpenter is at 2895 Fairfield Ave., Black Rock, . Hours are Wednesdays 5 to 10:30 p.m.