Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
How to hack metacpan.org
Search
mala
September 04, 2014
Programming
1.4k
7
Share
Embed
Copy iframe code
Copy JS code
Copy link
Start on current slide
How to hack metacpan.org
YAPC::Asia 2014 Reject con LT
2014-09-03
mala
September 04, 2014
More Decks by mala
See All by mala
The Evolution of Alert & Notification System / Becks Japan #1
mala
11
9k
TBD/Shibuya.XSS techtalk #8
mala
5
2.8k
実例に学ぶXSS脆弱性の発見と修正方法/line_dm 16 20160916 how to find and fix xss
mala
25
9.6k
超絶技巧CSRF / Shibuya.XSS techtalk #7
mala
41
15k
SECCON2013 slide
mala
14
3k
Other Decks in Programming
See All in Programming
【やさしく解説 設計編 #0】DDDのコード、読めるのに分からない人へ
panda728
PRO
1
180
SLOをサービス品質の共通言語にするために 取り組んできたこと
wakana0222
0
280
ランチタイムLT会3周年!ランチタイムLT会を3年間続けられたお話
y0hgi
1
120
エンジニア向け会社紹介/Findy Company Profile
findyinc
6
360k
コンテキストの使い捨てをやめる — ビジネスルール駆動開発と miko —
ioki
0
260
Spec Driven Development | AI Summit Lisbon
danielsogl
PRO
0
230
AI 輔助遺留系統現代化的經驗分享
jame2408
1
1.1k
これからAgentCoreを触る方へトレンドはGatewayです
har1101
6
460
The ROI of Quarkus for Spring Boot Applications
hollycummins
0
150
どこまでゆるくて許されるのか
tk3fftk
0
300
AI がコードを書く時代における新卒エンジニアの仕事風景 (2026) / New Graduate Engineers in the Era of AI Coding (2026)
sushichan044
0
190
Observability in Practice:Grafana 與 Edge Device SRE 的那些事
blueswen
0
180
Featured
See All Featured
Why Your Marketing Sucks and What You Can Do About It - Sophie Logan
marketingsoph
0
180
Design of three-dimensional binary manipulators for pick-and-place task avoiding obstacles (IECON2024)
konakalab
0
480
Design in an AI World
tapps
1
260
Connecting the Dots Between Site Speed, User Experience & Your Business [WebExpo 2025]
tammyeverts
11
960
Bioeconomy Workshop: Dr. Julius Ecuru, Opportunities for a Bioeconomy in West Africa
akademiya2063
PRO
1
170
Tell your own story through comics
letsgokoyo
1
980
How to Get Subject Matter Experts Bought In and Actively Contributing to SEO & PR Initiatives.
livdayseo
0
150
[Rails World 2023 - Day 1 Closing Keynote] - The Magic of Rails
eileencodes
38
2.9k
Money Talks: Using Revenue to Get Sh*t Done
nikkihalliwell
0
270
Making the Leap to Tech Lead
cromwellryan
135
10k
The Success of Rails: Ensuring Growth for the Next 100 Years
eileencodes
47
8.2k
Scaling GitHub
holman
464
140k
Transcript
)PXUPIBDL NFUBDQBOPSH NBMB
:"1$ߦͬͯͳ͍
͖ΐ͏ͷςʔϚ w )PXUPIBDLNFUBDQBOPSH ! w ѱ͍ҙຯͰ
NFUBDQBOPSHͰͷ SFNPUFDPEFFYFDVUJPO w िؒ΄ͲલʹใࠂpYFE w 1MBDL.JEEMFXBSF4FTTJPO$PPLJF w NFUBDQBOPSH͔ͬͯΒৄࡉॻ͜͏ͱࢥͬͨΒ NJZBHBXB͞Μ͕ͰϦϦʔεͨ͠ͷͰ NFUBDQBOPSHθϩσΠެ։ঢ়ଶͩͬͨ
͝ଘͰ͔͢ʁ 4UPSBCMFͰ ҙίʔυ࣮ߦ
ΦϒδΣΫτσγϦΞϥΠβ Λ௨ͨ͡ίʔυ࣮ߦ w ෳͷݴޠͰಉ༷ͷ͕ใࠂ͞Ε͍ͯΔ w ҙͷΫϥεͷΦϒδΣΫτΛ෮ݩͰ͖Δͷ w 3VCZ :".- .BSTIBM
w 1FSM 4UPSBCMF :".- 9.-
$PPLJFܦ༝Ͱͷ 4UPSBCMFΦϒδΣΫτ w σγϦΞϥΠζͷλΠϛϯάͰίʔυ࣮ߦग़དྷΔ w $PPLJFʹ4UPSBCMFͰσʔλอଘ͢Δηογϣϯ Ϛωʔδϟ͕͋Δ w )."$ॺ໊ʹΑΔվ᜵ࢭ͕ͳ͍PS伴͕ऑ͍ PS伴͕࿙ΕΔέʔεͰDPPLJF͕վ᜵Ͱ͖Δ
w ࡉͨ͠$PPLJFΛͬͨҙίʔυ࣮ߦग़དྷΔ
͍͔ͭ͘ใࠂ͞Ε͍ͯΔ w SFQPSUFECZNBMB ͍͖͞Μ w )5514FTTJPO "NPO w 1MBDL.JEEMFXBSF4FTTJPO$PPLJF
w w 4UPSBCMFUIBXDBMMFEPODPPLJFEBUBJONVMUJQMF $1"/NPEVMFT w IUUQTFDMJTUTPSHPTTTFDR
Өڹൣғ w ΦϒδΣΫτ͕෮ݩ͞ΕΔͱ͍͏͜ͱ w ԿΒ͔ͷॳظԽॲཧ͕࣮ߦ͞ΕͨΓ w ഁغ͞ΕΔλΠϛϯάͰσετϥΫλ͕࣮ߦ͞ΕͨΓ w ܕมͷλΠϛϯάͰԿ͔͕͓͖ͨΓ ʢίʔυຒΊࠐΊΔςϯϓϨʔτΤϯδϯͱ͔ʣ
w ͦͷଞΖΖͷ༧ظ͠ͳ͍
ΦϒδΣΫτσγϦΞϥΠβ ةݥ w ϓϨʔϯͳϋογϡΑΓ༧ظ͠ͳ͍͜ͱ͕ى ͖Δ w CMFTTFEIBTIඞཁͳ͚Ε 4UPSBCMFΛΘͳ͍΄͏͕͍͍
+40/ʹ͢Ε҆શʁ w ͓͓ΉͶͦ͏ w σγϦΞϥΠζͷΈͰى͖ͳ͍ w +40/ 42-JOKFDUJPO w จࣈྻ͕དྷΔͱࢥͬͯΔՕॴʹϋογϡྻ
͕ೖΔ͜ͱͰ༧ظ͠ͳ͍ಈ࡞͕ى͜ΔՄೳੑ
4UPSBCMFͷಛච͖͢ w ҙͷϞδϡʔϧͷϩʔυ͕Մೳ w PWFSMPBE͕ΘΕ͍ͯΔΦϒδΣΫτΛGSFF[F͢Δͱɺ PWFSMPBEϑϥά͖Ͱอଘ͞ΕΔ w PWFSMPBEϑϥά͕͍͍ͯΔ4UPSBCMFEPDVNFOUΛ ϩʔυ͢ΔࡍʹɺಁաతʹϞδϡʔϧΛϩʔυ͢Δ w
ຊདྷͳΒPWFSMPBE͕ΘΕ͍ͯͳ͍ϞδϡʔϧͰɺ͜ ͷϑϥάΛઃఆ͢Δ͜ͱͰɺҙͷϞδϡʔϧΛϩʔυ Մೳ
͜ΕطͷͰ͋Δ w NBTUFSJOHQFSMPSHUIFTUPSBCMF TFDVSJUZQSPCMFN w ۙʹͳͬͯEPDVNFOUʹॻ͔Εͨ w IUUQQFSMHJUQFSMPSHQFSMHJUDPNNJU GBDCCECGFEEB DFF
σετϥΫλ࣮ߦ 㲈ҙίʔυ࣮ߦ w σετϥΫλ࣮ߦͰग़དྷΔ͜ͱ͕ݶΒΕΔ w యܕతͳͷҰ࣌ϑΝΠϧআ ˠҙϑΝΠϧআ w ͤΊͯϑΝΠϧॻ͖ࠐΈ͕ग़དྷΕɾɾɾ w
ѱ༻Ͱ͖ͦ͏ͳ$1"/ϞδϡʔϧΛ୳͢
ݬͷҙίʔυ࣮ߦՄೳϞδϡʔϧΛ୳ͯ͠ w σετϥΫλͰίʔυ࣮ߦͰ͖ͦ͏ͳͷΛ୳ ͢ w FWBMTFMG\DPEF^ w PQFO ') TFMG\pMFOBNF^
w TZTUFN FYFD EP HMPC FUD w ͦ͏ͦ͏ͳ͍Α
ϑΝΠϧͷॻ͖ࠐΈ w ϑΝΠϧͷॻ͖ࠐΈ͕ग़དྷΕɺQNϑΝΠϧ Λੜͯ͠ϩʔυͯ͠Εҙίʔυ࣮ߦग़ དྷΔͷͰͳ͍͔ʁ w ࣮ࡍͷΞϓϦέʔγϣϯVTFMJCͯ͠Δ͜ͱ͕ ଟ͍ MJCMPDBM
w ΧϨϯτσΟϨΫτϦҎԼͷϑΝΠϧʹ͋Δఔ ࣗ༝ͳϑΥʔϚοτͰॻ͖ࠐΈ͕ग़དྷΕɻɻ
σετϥΫλͰϑΝΠϧʹॻ͖ࠐΉ $1"/Ϟδϡʔϧ w ࣮ࡏͨ͠ w HSFQ͠·ͬͯ͘ൃݟ w ࣗಈηʔϒϩάϑΝΠϧͷqVTIܥͷػೳ w QNϑΝΠϧΛੜͯ͠ϩʔυ·ͰՄೳ
w ςϯϓϨʔτվ᜵͔Βҙίʔυ࣮ߦ͕Մೳ
4UPSBCMFͰͷίʔυ࣮ߦ w ਂࠁ্͕͕ͬͨͱߟ͑ͯྑ͍ જࡏతҙίʔυ࣮ߦˠ࣮֬ͳҙίʔυ࣮ߦ w ਖ਼֬ʹʮΠϯετʔϧ͞Ε͍ͯΔϞδϡʔϧ࣍ୈͰ ҙίʔυ࣮ߦ͕Մೳʯ w ͔ͳΓଟ͘ͷڥͰΠϯετʔϧ͞Ε͍ͯΔϞδϡʔϧ
ͰՄೳͩͬͨ w QFSMTFDVSJUZʹใࠂ FYQMPJUެ։͕ద͔Ͳ͏͔૬ஊ த
·ͱΊ w 4UPSBCMF ͱ͍͏͔CMFTTFEIBTIΛ෮ݩͰ͖Δ γϦΞϥΠβҙίʔυ࣮ߦʹܨ͕Δةݥ͕ ͋Δ w "NPOͱ1MBDL.JEEMFXBSF4FTTJPOΛ֘͢ Δ͍ํͯ͠ΔਓΞφϯεಡΜͰରԠͯ͠Ͷɻ w
)BQQZ)BDLJOH