Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Sign up for free
Menu
Search
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Pricing
Search
Sign in
Sign up for free
How to hack metacpan.org
Search
mala
September 04, 2014
Programming
1.4k
7
Share
Embed
Copy iframe code
Copy JS code
Copy link
Start on current slide
How to hack metacpan.org
YAPC::Asia 2014 Reject con LT
2014-09-03
mala
September 04, 2014
More Decks by mala
See All by mala
The Evolution of Alert & Notification System / Becks Japan #1
mala
11
9.1k
TBD/Shibuya.XSS techtalk #8
mala
5
2.8k
実例に学ぶXSS脆弱性の発見と修正方法/line_dm 16 20160916 how to find and fix xss
mala
25
9.7k
超絶技巧CSRF / Shibuya.XSS techtalk #7
mala
41
15k
SECCON2013 slide
mala
14
3.1k
Other Decks in Programming
See All in Programming
R8 の設定見直しでアプリサイズ削減
andpad
0
220
SREの越境 / SRE Collaboration
y0hgi
2
310
sbt 2.0: takeoff
eed3si9n
0
160
気持ちぃ〜角丸 Squircle
ryu1013
0
310
AIに “答え“を書かせるのを やめてみた
___akari11
0
120
SalesForceを内製化!? ~ HR事業を支える顧客管理基盤のインフラを大公開 ~
oku053
0
180
Starting & Sustaining Code-Based E2E Testing for Non-Coding QA Teams( #jasstniigata )
teyamagu
PRO
1
1k
Vue Fes Japan の “作る側”に関わってみて
naokihaba
0
160
パスワード再設定メールのURLについて知っておこう
uyuki234
0
160
Findy - エンジニア向け会社紹介/Findy Company Deck
findyinc
6
400k
[Rails World 2026] Durable orchestration on Rails: from continuation to workflow
palkan
1
750
[ハンズオン]AIへの指示だけで「五目並べ」を作ってみよう
satoshi256kbyte
1
380
Featured
See All Featured
How to Grow Your eCommerce with AI & Automation
katarinadahlin
PRO
2
330
The Spectacular Lies of Maps
axbom
PRO
1
1.1k
Between Models and Reality
mayunak
4
500
Money Talks: Using Revenue to Get Sh*t Done
nikkihalliwell
0
520
SERP Conf. Vienna - Web Accessibility: Optimizing for Inclusivity and SEO
sarafernandez
2
1.6k
How STYLIGHT went responsive
nonsquared
100
6.3k
Google's AI Overviews - The New Search
badams
0
1.6k
Dominate Local Search Results - an insider guide to GBP, reviews, and Local SEO
greggifford
PRO
0
370
The Illustrated Guide to Node.js - THAT Conference 2024
reverentgeek
1
570
Hiding What from Whom? A Critical Review of the History of Programming languages for Music
tomoyanonymous
3
1.3k
Darren the Foodie - Storyboard
khoart
PRO
4
4k
Understanding Cognitive Biases in Performance Measurement
bluesmoon
32
3.1k
Transcript
)PXUPIBDL NFUBDQBOPSH NBMB
:"1$ߦͬͯͳ͍
͖ΐ͏ͷςʔϚ w )PXUPIBDLNFUBDQBOPSH ! w ѱ͍ҙຯͰ
NFUBDQBOPSHͰͷ SFNPUFDPEFFYFDVUJPO w िؒ΄ͲલʹใࠂpYFE w 1MBDL.JEEMFXBSF4FTTJPO$PPLJF w NFUBDQBOPSH͔ͬͯΒৄࡉॻ͜͏ͱࢥͬͨΒ NJZBHBXB͞Μ͕ͰϦϦʔεͨ͠ͷͰ NFUBDQBOPSHθϩσΠެ։ঢ়ଶͩͬͨ
͝ଘͰ͔͢ʁ 4UPSBCMFͰ ҙίʔυ࣮ߦ
ΦϒδΣΫτσγϦΞϥΠβ Λ௨ͨ͡ίʔυ࣮ߦ w ෳͷݴޠͰಉ༷ͷ͕ใࠂ͞Ε͍ͯΔ w ҙͷΫϥεͷΦϒδΣΫτΛ෮ݩͰ͖Δͷ w 3VCZ :".- .BSTIBM
w 1FSM 4UPSBCMF :".- 9.-
$PPLJFܦ༝Ͱͷ 4UPSBCMFΦϒδΣΫτ w σγϦΞϥΠζͷλΠϛϯάͰίʔυ࣮ߦग़དྷΔ w $PPLJFʹ4UPSBCMFͰσʔλอଘ͢Δηογϣϯ Ϛωʔδϟ͕͋Δ w )."$ॺ໊ʹΑΔվ᜵ࢭ͕ͳ͍PS伴͕ऑ͍ PS伴͕࿙ΕΔέʔεͰDPPLJF͕վ᜵Ͱ͖Δ
w ࡉͨ͠$PPLJFΛͬͨҙίʔυ࣮ߦग़དྷΔ
͍͔ͭ͘ใࠂ͞Ε͍ͯΔ w SFQPSUFECZNBMB ͍͖͞Μ w )5514FTTJPO "NPO w 1MBDL.JEEMFXBSF4FTTJPO$PPLJF
w w 4UPSBCMFUIBXDBMMFEPODPPLJFEBUBJONVMUJQMF $1"/NPEVMFT w IUUQTFDMJTUTPSHPTTTFDR
Өڹൣғ w ΦϒδΣΫτ͕෮ݩ͞ΕΔͱ͍͏͜ͱ w ԿΒ͔ͷॳظԽॲཧ͕࣮ߦ͞ΕͨΓ w ഁغ͞ΕΔλΠϛϯάͰσετϥΫλ͕࣮ߦ͞ΕͨΓ w ܕมͷλΠϛϯάͰԿ͔͕͓͖ͨΓ ʢίʔυຒΊࠐΊΔςϯϓϨʔτΤϯδϯͱ͔ʣ
w ͦͷଞΖΖͷ༧ظ͠ͳ͍
ΦϒδΣΫτσγϦΞϥΠβ ةݥ w ϓϨʔϯͳϋογϡΑΓ༧ظ͠ͳ͍͜ͱ͕ى ͖Δ w CMFTTFEIBTIඞཁͳ͚Ε 4UPSBCMFΛΘͳ͍΄͏͕͍͍
+40/ʹ͢Ε҆શʁ w ͓͓ΉͶͦ͏ w σγϦΞϥΠζͷΈͰى͖ͳ͍ w +40/ 42-JOKFDUJPO w จࣈྻ͕དྷΔͱࢥͬͯΔՕॴʹϋογϡྻ
͕ೖΔ͜ͱͰ༧ظ͠ͳ͍ಈ࡞͕ى͜ΔՄೳੑ
4UPSBCMFͷಛච͖͢ w ҙͷϞδϡʔϧͷϩʔυ͕Մೳ w PWFSMPBE͕ΘΕ͍ͯΔΦϒδΣΫτΛGSFF[F͢Δͱɺ PWFSMPBEϑϥά͖Ͱอଘ͞ΕΔ w PWFSMPBEϑϥά͕͍͍ͯΔ4UPSBCMFEPDVNFOUΛ ϩʔυ͢ΔࡍʹɺಁաతʹϞδϡʔϧΛϩʔυ͢Δ w
ຊདྷͳΒPWFSMPBE͕ΘΕ͍ͯͳ͍ϞδϡʔϧͰɺ͜ ͷϑϥάΛઃఆ͢Δ͜ͱͰɺҙͷϞδϡʔϧΛϩʔυ Մೳ
͜ΕطͷͰ͋Δ w NBTUFSJOHQFSMPSHUIFTUPSBCMF TFDVSJUZQSPCMFN w ۙʹͳͬͯEPDVNFOUʹॻ͔Εͨ w IUUQQFSMHJUQFSMPSHQFSMHJUDPNNJU GBDCCECGFEEB DFF
σετϥΫλ࣮ߦ 㲈ҙίʔυ࣮ߦ w σετϥΫλ࣮ߦͰग़དྷΔ͜ͱ͕ݶΒΕΔ w యܕతͳͷҰ࣌ϑΝΠϧআ ˠҙϑΝΠϧআ w ͤΊͯϑΝΠϧॻ͖ࠐΈ͕ग़དྷΕɾɾɾ w
ѱ༻Ͱ͖ͦ͏ͳ$1"/ϞδϡʔϧΛ୳͢
ݬͷҙίʔυ࣮ߦՄೳϞδϡʔϧΛ୳ͯ͠ w σετϥΫλͰίʔυ࣮ߦͰ͖ͦ͏ͳͷΛ୳ ͢ w FWBMTFMG\DPEF^ w PQFO ') TFMG\pMFOBNF^
w TZTUFN FYFD EP HMPC FUD w ͦ͏ͦ͏ͳ͍Α
ϑΝΠϧͷॻ͖ࠐΈ w ϑΝΠϧͷॻ͖ࠐΈ͕ग़དྷΕɺQNϑΝΠϧ Λੜͯ͠ϩʔυͯ͠Εҙίʔυ࣮ߦग़ དྷΔͷͰͳ͍͔ʁ w ࣮ࡍͷΞϓϦέʔγϣϯVTFMJCͯ͠Δ͜ͱ͕ ଟ͍ MJCMPDBM
w ΧϨϯτσΟϨΫτϦҎԼͷϑΝΠϧʹ͋Δఔ ࣗ༝ͳϑΥʔϚοτͰॻ͖ࠐΈ͕ग़དྷΕɻɻ
σετϥΫλͰϑΝΠϧʹॻ͖ࠐΉ $1"/Ϟδϡʔϧ w ࣮ࡏͨ͠ w HSFQ͠·ͬͯ͘ൃݟ w ࣗಈηʔϒϩάϑΝΠϧͷqVTIܥͷػೳ w QNϑΝΠϧΛੜͯ͠ϩʔυ·ͰՄೳ
w ςϯϓϨʔτվ᜵͔Βҙίʔυ࣮ߦ͕Մೳ
4UPSBCMFͰͷίʔυ࣮ߦ w ਂࠁ্͕͕ͬͨͱߟ͑ͯྑ͍ જࡏతҙίʔυ࣮ߦˠ࣮֬ͳҙίʔυ࣮ߦ w ਖ਼֬ʹʮΠϯετʔϧ͞Ε͍ͯΔϞδϡʔϧ࣍ୈͰ ҙίʔυ࣮ߦ͕Մೳʯ w ͔ͳΓଟ͘ͷڥͰΠϯετʔϧ͞Ε͍ͯΔϞδϡʔϧ
ͰՄೳͩͬͨ w QFSMTFDVSJUZʹใࠂ FYQMPJUެ։͕ద͔Ͳ͏͔૬ஊ த
·ͱΊ w 4UPSBCMF ͱ͍͏͔CMFTTFEIBTIΛ෮ݩͰ͖Δ γϦΞϥΠβҙίʔυ࣮ߦʹܨ͕Δةݥ͕ ͋Δ w "NPOͱ1MBDL.JEEMFXBSF4FTTJPOΛ֘͢ Δ͍ํͯ͠ΔਓΞφϯεಡΜͰରԠͯ͠Ͷɻ w
)BQQZ)BDLJOH