Speaker Deck
Sign in
Sign up
for free
PHPerのためのよくわかるCPU脆弱性解説 / What's Spectra for PHPers #phpconfuk
HASEGAWA Tomoki
June 16, 2018
Technology
1
670
PHPerのためのよくわかるCPU脆弱性解説 / What's Spectra for PHPers #phpconfuk
PHPカンファレンス福岡 2018の発表資料です。
HASEGAWA Tomoki
June 16, 2018
Tweet
Share
More Decks by HASEGAWA Tomoki
See All by HASEGAWA Tomoki
tomzoh
0
630
tomzoh
1
200
tomzoh
2
360
tomzoh
0
460
tomzoh
0
350
tomzoh
0
1.2k
tomzoh
1
310
tomzoh
1
230
tomzoh
0
720
Other Decks in Technology
See All in Technology
tarotaro0
0
390
masatoka
0
190
kenta_sato3
1
220
oracle4engineer
3
300
cmusudakeisuke
0
1.4k
gracia
0
470
nk35jk
2
1.5k
osuke
2
2.1k
rschiang
0
100
hololab
0
260
kikmysy4
0
150
manabusakai
0
980
Featured
See All Featured
keathley
12
430
searls
202
35k
carmenhchung
13
790
caitiem20
300
16k
ammeep
652
54k
malarkey
189
8.2k
lara
168
9.1k
colly
183
14k
davidbonilla
68
3.4k
reverentgeek
17
1.2k
myddelton
104
10k
smashingmag
281
46k
Transcript
୩ஐر 1)1FSͷͨΊͷΑ͘Θ͔Δ $16੬ऑੑղઆ
୩ஐر !UPN[PI
ϥΠϑϫʔΫ ςοΫΧϯϑΝϨϯεӡӦࢀՃ 8FCJ04ΞϓϦ։ൃ Ϗʔϧ ిࢠ࡞ αοΧʔ؍ઓ Ϩϯλ ϧΧʔτϨʔε
ʜ σδλϧαʔΧεגࣜձࣾ ෭ஂ$50 !UPN[PI
None
None
8FC%FWFMPQNFOUXJUI 8&"3&)*3*/( IUUQXXXEHDJSDVTDPN 0NPUFTBOEP 5PLZP
ࠓͷςʔϚ
$16ͷ੬ऑੑ4QFDUSF ε ϖ Ϋ λ ʔ
݄
IUUQTHPPHMFQSPKFDU[FSPCMPHTQPUKQSFBEJOHQSJWJMFHFENFNPSZXJUITJEFIUNM
XJUIBTJEFDIBOOFM ࣙॻӳࣙPOUIF8&# QSJWJMFHFE 3FBEJOH NFNPSZ
XJUIBTJEFDIBOOFM ࣙॻӳࣙPOUIF8&# 3FBEJOH NFNPSZ QSJWJMFHFE
XJUIBTJEFDIBOOFM ࣙॻӳࣙPOUIF8&# 3FBEJOH NFNPSZ QSJWJMFHFE QSJWJMFHFE ʲ໊ʳʬUIFʙʭಛݖ֊ڃʦʧ ʲܗʳಛݖΛ࣋ͭɺಛݖͷ͋Δ QSÍWɾJɾMFHFE
ಛݖྖҬͷϝϞϦΛ αΠυνϟωϧ੬ऑੑΛͬͯಡΈࠐΉ
ͭ·Γ
ಡΊ͍͚ͯͳ͍ϝϞϦྖҬΛ ಡΊͯ͠·͏
ͱͯେ͖ͳʹͳͬͨ
None
None
ͳͥେ͖ͳʹͳ͔ͬͨ
ᶃରʢͱࢥΘΕΔʣ$16͕͘͢͝ଟ͍
7BSJBOUTPGUIJTJTTVFBSFLOPXOUPBGGFDU NBOZNPEFSOQSPDFTTPST JODMVEJOHDFSUBJO QSPDFTTPSTCZ*OUFM ".%BOE"3. ᶃରʢͱࢥΘΕΔʣ$16͕͘͢͝ଟ͍
7BSJBOUTPGUIJTJTTVFBSFLOPXOUPBGGFDU NBOZNPEFSOQSPDFTTPST JODMVEJOHDFSUBJO QSPDFTTPSTCZ*OUFM ".%BOE"3. .BD 8JOEPXTϚγϯ 8FCαʔόͳͲ֤छαʔό ᶃରʢͱࢥΘΕΔʣ$16͕͘͢͝ଟ͍
7BSJBOUTPGUIJTJTTVFBSFLOPXOUPBGGFDU NBOZNPEFSOQSPDFTTPST JODMVEJOHDFSUBJO QSPDFTTPSTCZ*OUFM ".%BOE"3. .BD 8JOEPXTϚγϯ 8FCαʔόͳͲ֤छαʔό J1IPOF "OESPJE
ϧʔλ *P5ػث ᶃରʢͱࢥΘΕΔʣ$16͕͘͢͝ଟ͍
ᶄରࡦ͕औΓͮΒ͍
ᶄରࡦ͕औΓͮΒ͍ ৄࡉޙड़
ͲΜͳ੬ऑੑ͔
ͷલʹ$16جૅࣝ
جૅࣝΩϟογϡ
Ωϟογϡ
Ωϟογϡ $16ʹଂ͞ΕͨߴͳϝϞϦ
Ωϟογϡ ҰಡΜͩσʔλΩϟογϡʹஔ͘ $16ʹଂ͞ΕͨߴͳϝϞϦ
Ωϟογϡ ߴʹಈ࡞ͤ͞ΔͨΊʢϝϞϦ͍ʣ ҰಡΜͩσʔλΩϟογϡʹஔ͘ $16ʹଂ͞ΕͨߴͳϝϞϦ
Ωϟογϡ ݱͷ$16ΩϟογϡΛଟ༻͢Δ ߴʹಈ࡞ͤ͞ΔͨΊʢϝϞϦ͍ʣ ҰಡΜͩσʔλΩϟογϡʹஔ͘ $16ʹଂ͞ΕͨߴͳϝϞϦ
جૅࣝػత࣮ߦ
զʑ1)1FSͳͷͰ 1)1Ά͍ݴޠͰղઆ
ΞυϨε ༰ FDIP)FMMP B SBOE JG B
\HPUP ^ FDIP1$ FYJU FDIPl8PSME
ΞυϨε ༰ FDIP)FMMP B SBOE JG B
\HPUP ^ FDIP1$ FYJU FDIPl8PSME ʣ͜͜ΒΜΛ࣮ߦ͍ͯ͠Δ࣌ʹʜ
ΞυϨε ༰ FDIP)FMMP B SBOE JG B
\HPUP ^ FDIP1$ FYJU FDIPl8PSME ʣ͜͜ΒΜΛ࣮ߦ͍ͯ͠Δ࣌ʹʜ ʣઌߦͯ͜͜͠ΒΜ࣮ߦ͢Δ
ΞυϨε ༰ FDIP)FMMP B SBOE JG B
\HPUP ^ FDIP1$ FYJU FDIPl8PSME ʣ͜͜ΒΜΛ࣮ߦ͍ͯ͠Δ࣌ʹʜ ʣઌߦͯ͜͜͠ΒΜ࣮ߦ͢Δ ʣͷJGͷ݁ՌʹΑͬͯ ແବʹͳΔ͚Ͳػతʹ࣮ߦ͢Δ
جૅࣝྫ֎
$16 ΞυϨεۭؒ(# ΞυϨεόεCJU G G G G G G
G G GGGGGGGG (#
$16 ΞυϨεۭؒ(# ΞυϨεόεCJU G G G G G G
G G GGGGGGGG (# 04
$16 ΞυϨεۭؒ(# ΞυϨεόεCJU G G G G G G
G G GGGGGGGG (# 04 ϢʔβϓϩάϥϜ ϢʔβϓϩάϥϜ
$16 ΞυϨεۭؒ(# ΞυϨεόεCJU G G G G G G
G G GGGGGGGG (# 04 ϢʔβϓϩάϥϜ ϢʔβϓϩάϥϜ͕ $16͕ڐՄ͠ͳ͍ ྖҬͷϝϞϦʹ ΞΫηε͢Δͱྫ֎ ϢʔβϓϩάϥϜ
IUUQMBCPSBUPSZTVCKQD IUNM
جૅࣝػత࣮ߦ جૅࣝΩϟογϡ جૅࣝྫ֎
جૅࣝػత࣮ߦ جૅࣝΩϟογϡ جૅࣝྫ֎ ҰϝϞϦ͔ΒಡΜͩσʔλΛߴͳϝϞϦʹஔ͍͓ͯ͘
جૅࣝػత࣮ߦ جૅࣝΩϟογϡ جૅࣝྫ֎ ҰϝϞϦ͔ΒಡΜͩσʔλΛߴͳϝϞϦʹஔ͍͓ͯ͘ ઌͷํΛ࣮ߦ͓ͯ͘͠
جૅࣝػత࣮ߦ جૅࣝΩϟογϡ جૅࣝྫ֎ ҰϝϞϦ͔ΒಡΜͩσʔλΛߴͳϝϞϦʹஔ͍͓ͯ͘ ઌͷํΛ࣮ߦ͓ͯ͘͠ $16͕ڐՄ͠ͳ͍ϝϞϦʹΞΫηε͢ΔͱΤϥʔ
$16ͷ੬ऑੑ4QFDUSF ε ϖ Ϋ λ ʔ
͜ΜͳϝϞϦϚοϓΛఆ
''' ϢʔβϓϩάϥϜ ϢʔβϓϩάϥϜ ผͷϓϩάϥϜ
͜ΜͳϓϩάϥϜ͕͋ͬͨͱ͢Δ
ΞυϨε ༰ FDIP)FMMP B SBOE JG B
\HPUP ^ C SFBE D SFBE C ʢΞΫηεݖͷͳ͍ΞυϨεʣ
ΞυϨε ༰ FDIP)FMMP B SBOE JG B
\HPUP ^ C SFBE D SFBE C ʢΞΫηεݖͷͳ͍ΞυϨεʣ ʣ͜͜ΒΜΛ࣮ߦ͍ͯ͠Δ࣌ʹʜ
ΞυϨε ༰ FDIP)FMMP B SBOE JG B
\HPUP ^ C SFBE D SFBE C ʢΞΫηεݖͷͳ͍ΞυϨεʣ ʣ͜͜ΒΜΛ࣮ߦ͍ͯ͠Δ࣌ʹʜ ʣઌߦͯ͜͜͠ΒΜ͕࣮ߦ͞ΕΔ
ΞυϨε ༰ FDIP)FMMP B SBOE JG B
\HPUP ^ C SFBE D SFBE C ʢΞΫηεݖͷͳ͍ΞυϨεʣ ʣ͜͜ΒΜΛ࣮ߦ͍ͯ͠Δ࣌ʹʜ ʣઌߦͯ͜͜͠ΒΜ͕࣮ߦ͞ΕΔ ʣͷΛCʹ֨ೲɻ
ΞυϨε ༰ FDIP)FMMP B SBOE JG B
\HPUP ^ C SFBE D SFBE C ʢΞΫηεݖͷͳ͍ΞυϨεʣ ʣ͜͜ΒΜΛ࣮ߦ͍ͯ͠Δ࣌ʹʜ ʣઌߦͯ͜͜͠ΒΜ͕࣮ߦ͞ΕΔ ʣͷΛCʹ֨ೲɻ ຊདྷྫ֎͕ൃੜ͢ΔΞΫηε ػ࣮ߦதྫ֎ൃੜ͠ͳ͍ ʢൃੜͨ͠ΒࠔΔʣ
ΞυϨε ༰ FDIP)FMMP B SBOE JG B
\HPUP ^ C SFBE D SFBE C ʢΞΫηεݖͷͳ͍ΞυϨεʣ ʣ͜͜ΒΜΛ࣮ߦ͍ͯ͠Δ࣌ʹʜ ʣઌߦͯ͜͜͠ΒΜ͕࣮ߦ͞ΕΔ ʣͷΛCʹ֨ೲɻ ʣ C ͷΛ Dʹ֨ೲɻ
ΞυϨε ༰ FDIP)FMMP B SBOE JG B
\HPUP ^ C SFBE D SFBE C ʢΞΫηεݖͷͳ͍ΞυϨεʣ ʣ͜͜ΒΜΛ࣮ߦ͍ͯ͠Δ࣌ʹʜ ʣઌߦͯ͜͜͠ΒΜ͕࣮ߦ͞ΕΔ ʣͷΛCʹ֨ೲɻ ʣ C ͷΛ Dʹ֨ೲɻ w ʙGGͷൣғ w ϢʔβϓϩάϥϜ͔ΒΞΫηεͰ͖ΔྖҬ w ͜ͷΞΫηεͰʙGGͷ Ͳ͔͜ͷόΠτ͕ΩϟογϡʹΔ
ΞυϨε ༰ FDIP)FMMP B SBOE JG B
\HPUP ^ C SFBE D SFBE C ʢΞΫηεݖͷͳ͍ΞυϨεʣ ʣ͜͜ΒΜΛ࣮ߦ͍ͯ͠Δ࣌ʹʜ ʣઌߦͯ͜͜͠ΒΜ͕࣮ߦ͞ΕΔ ʣͷΛCʹ֨ೲɻ ʣ C ͷΛ Dʹ֨ೲɻ
ΞυϨε ༰ YY YY YY YY
YY YY YY GG YY ΞυϨε ༰ GPS J J J \ TUBSU UJNF E SFBE J FOE UJNF JG FOETUBSU \ FDIPͷJͰͨ͠ʂʂ ^ ^ SFUVSO
ΞυϨε ༰ YY YY YY YY
YY YY YY GG YY ΞυϨε ༰ GPS J J J \ TUBSU UJNF E SFBE J FOE UJNF JG FOETUBSU \ FDIPͷJͰͨ͠ʂʂ ^ ^ SFUVSO ॱ൪ʹಡΈࠐΈ͔͔ͯͬͨ࣌ؒ͠Λଌఆ
ΞυϨε ༰ YY YY YY YY
YY YY YY GG YY ΞυϨε ༰ GPS J J J \ TUBSU UJNF E SFBE J FOE UJNF JG FOETUBSU \ FDIPͷJͰͨ͠ʂʂ ^ ^ SFUVSO ॱ൪ʹಡΈࠐΈ͔͔ͯͬͨ࣌ؒ͠Λଌఆ ͚ͩ͘͢͝ಡΈࠐΈ͕͔ͬͨ ͕Ωϟογϡʹ͍ͬͯͨ ຊདྷಡΊͳ͍ͷ༰ͩͬͨ
ΞυϨε ༰ YY YY YY YY
YY YY YY GG YY ΞυϨε ༰ GPS J J J \ TUBSU UJNF E SFBE J FOE UJNF JG FOETUBSU \ FDIPͷJͰͨ͠ʂʂ ^ ^ SFUVSO ॱ൪ʹಡΈࠐΈ͔͔ͯͬͨ࣌ؒ͠Λଌఆ ΞυϨε ༰ FDIP)FMMP B SBOE JG B \HPUP ^ C SFBE D SFBE C ʢΞΫηεݖͷͳ͍ʣ ͚ͩ͘͢͝ಡΈࠐΈ͕͔ͬͨ ͕Ωϟογϡʹ͍ͬͯͨ ຊདྷಡΊͳ͍ͷ༰ͩͬͨ
ΞυϨε ༰ YY YY YY YY
YY YY YY GG YY ΞυϨε ༰ GPS J J J \ TUBSU UJNF E SFBE J FOE UJNF JG FOETUBSU \ FDIPͷJͰͨ͠ʂʂ ^ ^ SFUVSO ॱ൪ʹಡΈࠐΈ͔͔ͯͬͨ࣌ؒ͠Λଌఆ ΞυϨε ༰ FDIP)FMMP B SBOE JG B \HPUP ^ C SFBE D SFBE C ʢΞΫηεݖͷͳ͍ʣ
$16ͷ੬ऑੑ4QFDUSF ε ϖ Ϋ λ ʔ ʢݫີʹ4QFDUSFͱ.FMUEPXOͷ߹ͤʣ
͜Μͳ͓Ͱͨ͠
͓͠Ζ͍Ͱ͢Ͷʂ
ͱ͜ΖͰʜ
ᶄରࡦ͕औΓͮΒ͍
ᶄରࡦ͕औΓͮΒ͍ wۙͷ$16ɺ໋ྩΛ୯७Խͯ͠$16ͷσό ΠεͰۀͯ͠ॲཧ͢Δ͜ͱͰߴԽ͍ͯ͠Δɻ w$16ͷ֎ͷ͍σόΠεΛͨͩͪͨ͘ͳ͍ɻ $16ʹख͕ۭ͘σόΠεΛ࡞Γͨ͘ͳ͍ɻ wػత࣮ߦͦ͜ߴԽͷΩϞɻ
͓͠·͍ !UPN[PI w "TLUIF4QFBLFS w ࠙ձ w 5XJUUFS w #MPH
ສ͕Ұ͕࣌ؒ༨ͬͨͱ͖ͷͨΊͷ ͓·͚
%ʙ% "ʙ" *OUFM1FOUJVN
%ʙ% "ʙ" *OUFM1FOUJVN ΞυϨεόεϏοτ ʙGGGGGGGGͷ(# "ʙ"ݻఆ όΠτʢ Ϗοτʣ୯ҐͷΞΫηε
ᶄରࡦ͕औΓͮΒ͍ wۙͷ$16ɺ໋ྩΛ୯७Խͯ͠$16ͷσό ΠεͰۀͯ͠ॲཧ͢Δ͜ͱͰߴԽ͍ͯ͠Δɻ w$16ͷ֎ͷ͍σόΠεΛͨͩͪͨ͘ͳ͍ɻ $16ʹख͕ۭ͘σόΠεΛ࡞Γͨ͘ͳ͍ɻ wػత࣮ߦͦ͜ߴԽͷΩϞɻ
Ͳ͏ͬͯରࡦ͍ͯ͠Δ͔
$16 ΞυϨεۭؒ(# ΞυϨεόεCJU G G G G G G
G G GGGGGGGG (# 04 ϢʔβϓϩάϥϜ
ذ༧ଌόοϑΝ
ذ༧ଌόοϑΝ wذΛ༧ଌͰ͖Δͱػ࣮ߦ͕ແବʹͳΓʹ͍͘ɻخ͍͠ɻ wաڈͷذΛهԱ͓͍ͯͯ͠ɺ֬తͳφχͰ༧ଌ͢Δɻ ʢذ༧ଌόοϑΝʣ wϐϯϙΠϯτʹʮ͜ͷذ໋ྩʯͱ͍͏όοϑΝͱɺॴʹ ݶΒͣʮ͜͜ذʯͱ͍͏࣌ؒతͳൣғͰఆΊͨόοϑΝ ͋Δɻ
ذ༧ଌόοϑΝ wذΛ༧ଌͰ͖Δͱػ࣮ߦ͕ແବʹͳΓʹ͍͘ɻخ͍͠ɻ wաڈͷذΛهԱ͓͍ͯͯ͠ɺ֬తͳφχͰ༧ଌ͢Δɻ ʢذ༧ଌόοϑΝʣ wϐϯϙΠϯτʹʮ͜ͷذ໋ྩʯͱ͍͏όοϑΝͱɺॴʹ ݶΒͣʮ͜͜ذʯͱ͍͏࣌ؒతͳൣғͰఆΊͨόοϑΝ ͋Δɻ $16͕ϓϩάϥϚͷบΛಡΜͰ͍Δ ʢͱݴ͑ΔͷͰͳ͍ͩΖ͏͔ʣ
()[ ճTFD ԯճTFD ʢʢ5#TFDˠ5#TFDˠ(#TFDʣˠ(#TFDˠ(#TFDʣˠ.#TFD FUIFS ˠ.#TFD JOUFSFOU $16ͷΩϟογϡͱϝϞϦ $16
-.# (#TFD ίΞ -,# 5#TFD -,# 5#TFD ॲཧஔ ϝΠϯϝϞϦ (#(#TFD 44% 5#(#TFD
()[ ճTFD ԯճTFD ʢʢ5#TFDˠ5#TFDˠ(#TFDʣˠ(#TFDˠ(#TFDʣˠ.#TFD FUIFS ˠ.#TFD JOUFSFOU $16ͷΩϟογϡͱϝϞϦ $16
-.# (#TFD ίΞ -,# 5#TFD -,# 5#TFD ॲཧஔ ϝΠϯϝϞϦ (#(#TFD 44% 5#(#TFD ഒ
()[ ճTFD ԯճTFD ʢʢ5#TFDˠ5#TFDˠ(#TFDʣˠ(#TFDˠ(#TFDʣˠ.#TFD FUIFS ˠ.#TFD JOUFSFOU $16ͷΩϟογϡͱϝϞϦ $16
-.# (#TFD ίΞ -,# 5#TFD -,# 5#TFD ॲཧஔ ϝΠϯϝϞϦ (#(#TFD 44% 5#(#TFD ഒ ഒ
()[ ճTFD ԯճTFD ʢʢ5#TFDˠ5#TFDˠ(#TFDʣˠ(#TFDˠ(#TFDʣˠ.#TFD FUIFS ˠ.#TFD JOUFSFOU $16ͷΩϟογϡͱϝϞϦ $16
-.# (#TFD ίΞ -,# 5#TFD -,# 5#TFD ॲཧஔ ϝΠϯϝϞϦ (#(#TFD 44% 5#(#TFD ഒ ഒ ഒ
()[ ճTFD ԯճTFD ʢʢ5#TFDˠ5#TFDˠ(#TFDʣˠ(#TFDˠ(#TFDʣˠ.#TFD FUIFS ˠ.#TFD JOUFSFOU $16ͷΩϟογϡͱϝϞϦ $16
-.# (#TFD ίΞ -,# 5#TFD -,# 5#TFD ॲཧஔ ϝΠϯϝϞϦ (#(#TFD 44% 5#(#TFD ഒ ഒ ഒ ഒ
σʔλͷہॴੑ wϓϩάϥϜ͕σʔλΛΞΫηε͢Δ߹ɺ ͍ۙྖҬʹ࿈ଓͯ͠ΞΫηε͢Δ͜ͱ͕ ଟ͍ɻ w͍ۙ ۭؒతPS࣌ؒత
QIQ GPS J J J \ FDIP)FMMP8PSME ^ L2 #0 EXT_STMT
L2 #1 ASSIGN $i 0 L2 #2 JMP J7 L3 #3 EXT_STMT L3 #4 ECHO "Hello World." L2 #5 POST_INC $i ~1 L2 #6 FREE ~1 L2 #7 IS_SMALLER $i 10 ~2 L2 #8 EXT_STMT L2 #9 JMPNZ ~2 J3 L6 #10 RETURN 1
QIQ GPS J J J \ FDIP)FMMP8PSME ^ L2 #0 EXT_STMT
L2 #1 ASSIGN $i 0 L2 #2 JMP J7 L3 #3 EXT_STMT L3 #4 ECHO "Hello World." L2 #5 POST_INC $i ~1 L2 #6 FREE ~1 L2 #7 IS_SMALLER $i 10 ~2 L2 #8 EXT_STMT L2 #9 JMPNZ ~2 J3 L6 #10 RETURN 1 ۭؒతʹ͍ۙ ಉ͡ͱ͜ΖΛճ͍ͬͯΔ
QIQ GPS J J J \ FDIP)FMMP8PSME ^ L2 #0 EXT_STMT
L2 #1 ASSIGN $i 0 L2 #2 JMP J7 L3 #3 EXT_STMT L3 #4 ECHO "Hello World." L2 #5 POST_INC $i ~1 L2 #6 FREE ~1 L2 #7 IS_SMALLER $i 10 ~2 L2 #8 EXT_STMT L2 #9 JMPNZ ~2 J3 L6 #10 RETURN 1
QIQ GPS J J J \ FDIP)FMMP8PSME ^ L2 #0 EXT_STMT
L2 #1 ASSIGN $i 0 L2 #2 JMP J7 L3 #3 EXT_STMT L3 #4 ECHO "Hello World." L2 #5 POST_INC $i ~1 L2 #6 FREE ~1 L2 #7 IS_SMALLER $i 10 ~2 L2 #8 EXT_STMT L2 #9 JMPNZ ~2 J3 L6 #10 RETURN 1 Jʹසൟʹ ΞΫηε ͍ͯ͠Δ
ࠂ
None
ʢۚʣʙʢʣ 1)1FS,BJHJ
ʢʣʙʢʣ τʔΫืूத
YYYYʙYYYY CVJMEFSTDPOUPLZP /PXPO$G1
͓͠·͍ !UPN[PI w "TLUIF4QFBLFS w ࠙ձ w 5XJUUFS w #MPH
tomzoh
tarotaro0
masatoka
kenta_sato3
oracle4engineer
cmusudakeisuke
gracia
nk35jk
osuke
rschiang
hololab
kikmysy4
manabusakai
keathley
searls
carmenhchung
caitiem20
ammeep
malarkey
lara
colly
davidbonilla
reverentgeek
myddelton
smashingmag
