あなたの"履歴"を狙う攻撃たち / Eyes on Your Browsing History

「第22回 ゼロから始めるセキュリティ入門 勉強会」で使った LT 資料です。
フルバージョンはこちら: https://diary.shift-js.info/browsing-history-sniffing/

Transcript

1. ୈճ
   θϩ͔Β࢝ΊΔηΩϡϦςΟೖ໳
   ษڧձ
   
   PO
   :PVS
   #SPXTJOH
   )JTUPSZ
   ͋ͳͨͷཤྺΛૂ͏߈ܸͨͪ !MNU@TXBMMPX
   BLB
   !ZOVDIZ
   IUUQTTIJGUKTJOGP
2. © 2018 shift-js.info All Rights Reserved.
    ‣ BLB
   !ZOVDIZ
   ‣ 6OEFSHSBEVBUF
   BU
   6OJW
   PG
   5PLZP
   ‣ ὑ
   8FC
   4FDVSJUZ
   BOE
   )PLLBJEP
   ‣ 4UB⒎
   BU
   4&$$0/
   #FHJOOFST
   ‣ 4UB⒎
   BU
   4FDVSJUZ
   $BNQ
   ‣ 4FF
   IUUQTTIJGUKTJOGP !MNU@TXBMMPX
3. © 2018 shift-js.info All Rights Reserved. /05&
 ஫ҙ ‣ ࠓճ͸
   ຊ೔ެ։ͨ͠
   ࣍ͷϒϩάهࣄͷ಺༰ͷ঺հͰ͢
   ‣ #SPXTJOH
   )JTUPSZ
   4OJ⒏OH
   ࠷લઢ
   
   ͋ͳͨͷϒϥ΢βཤྺΛૂ͏ ߈ܸͨͪ
 IUUQTEJBSZTIJGUKTJOGPCSPXTJOHIJTUPSZTOJ⒏OH
   ‣ ࠓճͷωλͷഎܠ
   ‣ 64&/*9
   ͷ
   4NJUI
   FU
   BM
   
   ͸
   ݱ୅ͷ
   8FC
   ϒϥ΢β๊͕͑Δ໰ ୊ΛݟͭΊ௚͖͔͚ͬ͢ͱͯ͠
   ͱͯ΋Ξπ͍
   ‣ ΦϑϨί ΦϑϨί
   
4. ϒϥ΢βཤྺͱ
 ϢʔβʔɾϓϥΠόγʔ
5. © 2018 shift-js.info All Rights Reserved. #SPXTJOH
   )JTUPSZ
 ϒϥ΢βཤྺͷॏཁੑ ‣ ϒϥ΢βཤྺ
   #SPXTJOH
   )JTUPSZ
   ͸͋ΔݸਓΛΑ͘ද͢
   ‣ ࣍ͷ࿦จ͸
   #SPXTJOH
   )JTUPSZ
   ͷߴ͍
   VOJRVFOFTT
   ͓Αͼ
   pOHFSQSJOUJOH
   ΁ͷ༗ޮੑΛओு͍ͯ͠Δ
   ‣ -
   0MFKOJL
   $
   $BTUFMMVDDJB
   BOE
   "
   +BOD
   l8IZ
   KPIOOZ
   DBO`U
   CSPXTF
   JO
   QFBDF
   0O
   UIF
   VOJRVFOFTT
   PG
   XFC
   CSPXTJOH
   IJTUPSZ
   QBUUFSOT z
   JO
   UI
   8PSLTIPQ
   PO
   )PU
   5PQJDT
   JO
   1SJWBDZ
   &OIBODJOH
   5FDIOPMPHJFT
   )PU1&5T
   
   
   ‣ ϒϥ΢βཤྺ
   #SPXTJOH
   )JTUPSZ
   ͸ݸਓͷଞͱͷؔ܎ੑ΋ද͢
   ‣ FH
   4/4
   Ͱͷ͋ΔਓͷϓϩϑΟʔϧͷӾཡཤྺ
   
6. © 2018 shift-js.info All Rights Reserved. 5XP
   $MBTTJDBM
   "UUBDLT
 7JTJUFEMJOL
   "UUBDL
   ͱ
   $BDIFCBTFE
   "UUBDL ‣ ݱ୅ͷ
   )JTUPSZ
   4OJ⒏OH
   ͷख๏͸
   ֓Ͷ࣍ͷ
   
   ͭͷΧςΰϦʹ෼ ྨ͢Δ͜ͱ͕Ͱ͖Δ
   ‣ 7JTJUFEMJOL
   "UUBDL
   ‣ WJTJUFE
   ηϨΫλʹΑΔελΠϧͷมԽΛ
   ௚઀తcؒ઀త ʹ؍ଌ͢Δ λΠϓͷ
   )JTUPSZ
   4OJ⒏OH
   ‣ $BDIFCBTFE
   "UUBDL
   ‣ ϒϥ΢βͷ࠷దԽ 0QUJNJ[BUJPO ػߏ
   ͱΓΘ͚Ωϟογϡػߏͷڍಈ Λ؍ଌ͢ΔλΠϓͷ
   )JTUPSZ
   4OJ⒏OH
   
7. © 2018 shift-js.info All Rights Reserved. WJTJUFE
   JO
   $44 
 WJTJUFE
   ηϨΫλ ‣ $44
   ʹ͸๚Εͨ͜ͱʹ͋Δ
   ϒϥ΢βཤྺதʹ͋Δ
   ϦϯΫʹର ͯ͠ͷΈ
   WJTJUFE
   ͱݺ͹ΕΔٖࣅΫϥε
   QTFVEPDMBTT
   Λ༻͍ ͯ
   ಛผͳελΠϧΛࢦఆ͢Δ͜ͱ͕Ͱ͖Δ
   ‣ ্͸๚Εͨ͜ͱͷ͋ΔϦϯΫΛ྘৭Ͱදࣔ͢Δ৔߹ͷྫ
    a:visited { color: green; }
8. © 2018 shift-js.info All Rights Reserved. %JSFDU
   "CVTF
   PG
   WJTJUFE
   
 ௚઀ѱ༻͢Δ͜ͱ͸Ͱ͖Δ͔ ‣ ݱࡏ
   ࣗ໌ͳѱ༻ํ๏͸๷͕Ε͍ͯΔ
   ‣ ੲ͸
   XJOEPXHFU$PNQVUFE4UZMF
   ΍ͦͷ୅ସͨΓ͑Δ΋ͷʹΑ Γ
   WJTJUFE
   ঢ়ଶͰ͋Δ͜ͱΛײ஌Ͱ͖͕ͨ
   ࠓ͸μϝ
   ‣ ͦ΋ͦ΋ࠓ͸
   WJTJUFE
   ͷதͰࢦఆͰ͖ΔελΠϧ੍͕ݶ͞Ε͍ͯΔ
   ‣ FH
   CBDLHSPVOEJNH
   VSM 
   Ͱ͖ͳ͍
   ‣ ΑΓৄ͘͠͸ҎԼΛҰಡͷ͜ͱ
   ‣ 1SJWBDZ
   BOE
   UIF
   WJTJUFE
   TFMFDUPS
   
 IUUQTEFWFMPQFSNP[JMMBPSHFO64EPDT8FC$44 1SJWBDZ@BOE@UIF@WJTJUFE@TFMFDUPS
   
9. © 2018 shift-js.info All Rights Reserved. 5IF
   &SB
   PG
   *OEJSFDU
   "CVTF
   ؒ઀తͳ߈ܸख๏΁ ‣ ͦ͜Ͱؒ઀తͳѱ༻ํ๏͕໛ࡧ͞ΕΔΑ͏ʹͳ͖ͬͯͨ
   ‣ WJTJUFE
   ηϨΫλΛར༻͢Δख๏
   ‣ WJTJUFE
   ʹΑΓى͜ΔมԽ͕ٴ΅͢෭࡞༻Λ؍ଌ͢Δ
   ‣ αΠυνϟωϧ߈ܸతͳख๏Ͱ͋Δ
   ‣ WJTJUFE
   ηϨΫλΛར༻͠ͳ͍ख๏
   ‣ ϒϥ΢βͷΩϟογϡػߏͷڍಈΛར༻ͨ͠΋ͷ
   ‣ )454
   Λར༻ͨ͠΋ͷ
   
   ‣ FH
   4OJ⒐Z
   IUUQEJSBDEFMUBTHJUIVCJPTOJ⒐Z
   ‣ ৄ͘͠͸ϒϩά΁
 IUUQTEJBSZTIJGUKTJOGPCSPXTJOHIJTUPSZTOJ⒏OH
   
10. ࠓޙ
 *O
    UIF
    'VUVSF
11. © 2018 shift-js.info All Rights Reserved. ෳࡶԽ͢Δ
    8FC
 5BOHMFE
    8PSME
    PG
    8FC
    5FDIOPMPHZ
    ‣ 8FC
    ٕज़ͷ
    $PNQMFYJUZ
    ͸೔ʑ૿͍ͯ͠Δ
    ‣ ͦΕͧΕ͕ࣗ༝ͳਐԽΛ਱͛
    ෳࡶʹབྷΈ߹͍ͬͯΔ
    ‣ ηΩϡϦςΟҙࣝͷͳ͍Ұ෦ͷ࢓༷΍࣮૷͕
    શମͷ҆શʹ΄͜ΖͼΛ ࡞͍ͬͯΔͱ͍͏έʔε͕
    ͜ͷෳࡶ͞ͷதʹӅΕ͍ͯΔ
    ‣ ͜ͷ
    $PNQMFYJUZ
    ͱͷ͏·͍޲͖߹͍ํΛಘ͍ͯ͘ඞཁ͕͋Δ
    ‣ /05&
    
    ೥͸ҎԼͷΑ͏ͳൃද΋ͨ͠ͷͰڵຯ͕͋Ε͹ੋඇ
    ‣ 5BOHMFE
    8PSME
    PG
    8FC
    5FDIOPMPHZ
 IUUQTTQFBLFSEFDLDPNMNU@TXBMMPXUBOHMFEXPSMEPGXFC UFDIOPMPHZBSFXFTBGF
    
12. "OZ
    2VFTUJPOT
    
    5BLBTIJ
    :POFVDIJ
    KB
    !MNU@TXBMMPX
    FO
    !ZOVDIZ
    IUUQTTIJGUKTJOGP