Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
How to hack metacpan.org
Search
mala
September 04, 2014
Programming
7
1.3k
How to hack metacpan.org
YAPC::Asia 2014 Reject con LT
2014-09-03
mala
September 04, 2014
Tweet
Share
More Decks by mala
See All by mala
The Evolution of Alert & Notification System / Becks Japan #1
mala
11
8.8k
TBD/Shibuya.XSS techtalk #8
mala
5
2.6k
実例に学ぶXSS脆弱性の発見と修正方法/line_dm 16 20160916 how to find and fix xss
mala
25
9.3k
超絶技巧CSRF / Shibuya.XSS techtalk #7
mala
40
14k
SECCON2013 slide
mala
14
2.9k
Other Decks in Programming
See All in Programming
KawaiiLT 登壇資料 キャリアとモチベーション
hiiragi
0
110
AIコードエディタの基盤となるLLMのFlutter性能評価
alquist4121
0
210
The Efficiency Paradox and How to Save Yourself and the World
hollycummins
0
110
Youtube Lofier - Chrome拡張開発
ninikoko
0
2.4k
List とは何か? / PHPerKaigi 2025
meihei3
0
870
国漢文混用体からHolloまで
minhee
1
190
タイムゾーンの奥地は思ったよりも闇深いかもしれない
suguruooki
1
650
Java 24まとめ / Java 24 summary
kishida
3
500
The Evolution of the CRuby Build System
kateinoigakukun
0
700
Enterprise Web App. Development (1): Build Tool Training Ver. 5
knakagawa
1
110
エンジニア未経験が最短で戦力になるためのTips
gokana
0
270
On-the-fly Suggestions of Rewriting Method Deprecations
ohbarye
1
2k
Featured
See All Featured
Fantastic passwords and where to find them - at NoRuKo
philnash
51
3.1k
Writing Fast Ruby
sferik
628
61k
What’s in a name? Adding method to the madness
productmarketing
PRO
22
3.4k
Statistics for Hackers
jakevdp
798
220k
Testing 201, or: Great Expectations
jmmastey
42
7.5k
A designer walks into a library…
pauljervisheath
205
24k
[RailsConf 2023] Rails as a piece of cake
palkan
54
5.4k
Designing for humans not robots
tammielis
252
25k
GitHub's CSS Performance
jonrohan
1030
460k
Music & Morning Musume
bryan
47
6.5k
GraphQLとの向き合い方2022年版
quramy
46
14k
StorybookのUI Testing Handbookを読んだ
zakiyama
29
5.6k
Transcript
)PXUPIBDL NFUBDQBOPSH NBMB
:"1$ߦͬͯͳ͍
͖ΐ͏ͷςʔϚ w )PXUPIBDLNFUBDQBOPSH ! w ѱ͍ҙຯͰ
NFUBDQBOPSHͰͷ SFNPUFDPEFFYFDVUJPO w िؒ΄ͲલʹใࠂpYFE w 1MBDL.JEEMFXBSF4FTTJPO$PPLJF w NFUBDQBOPSH͔ͬͯΒৄࡉॻ͜͏ͱࢥͬͨΒ NJZBHBXB͞Μ͕ͰϦϦʔεͨ͠ͷͰ NFUBDQBOPSHθϩσΠެ։ঢ়ଶͩͬͨ
͝ଘͰ͔͢ʁ 4UPSBCMFͰ ҙίʔυ࣮ߦ
ΦϒδΣΫτσγϦΞϥΠβ Λ௨ͨ͡ίʔυ࣮ߦ w ෳͷݴޠͰಉ༷ͷ͕ใࠂ͞Ε͍ͯΔ w ҙͷΫϥεͷΦϒδΣΫτΛ෮ݩͰ͖Δͷ w 3VCZ :".- .BSTIBM
w 1FSM 4UPSBCMF :".- 9.-
$PPLJFܦ༝Ͱͷ 4UPSBCMFΦϒδΣΫτ w σγϦΞϥΠζͷλΠϛϯάͰίʔυ࣮ߦग़དྷΔ w $PPLJFʹ4UPSBCMFͰσʔλอଘ͢Δηογϣϯ Ϛωʔδϟ͕͋Δ w )."$ॺ໊ʹΑΔվ᜵ࢭ͕ͳ͍PS伴͕ऑ͍ PS伴͕࿙ΕΔέʔεͰDPPLJF͕վ᜵Ͱ͖Δ
w ࡉͨ͠$PPLJFΛͬͨҙίʔυ࣮ߦग़དྷΔ
͍͔ͭ͘ใࠂ͞Ε͍ͯΔ w SFQPSUFECZNBMB ͍͖͞Μ w )5514FTTJPO "NPO w 1MBDL.JEEMFXBSF4FTTJPO$PPLJF
w w 4UPSBCMFUIBXDBMMFEPODPPLJFEBUBJONVMUJQMF $1"/NPEVMFT w IUUQTFDMJTUTPSHPTTTFDR
Өڹൣғ w ΦϒδΣΫτ͕෮ݩ͞ΕΔͱ͍͏͜ͱ w ԿΒ͔ͷॳظԽॲཧ͕࣮ߦ͞ΕͨΓ w ഁغ͞ΕΔλΠϛϯάͰσετϥΫλ͕࣮ߦ͞ΕͨΓ w ܕมͷλΠϛϯάͰԿ͔͕͓͖ͨΓ ʢίʔυຒΊࠐΊΔςϯϓϨʔτΤϯδϯͱ͔ʣ
w ͦͷଞΖΖͷ༧ظ͠ͳ͍
ΦϒδΣΫτσγϦΞϥΠβ ةݥ w ϓϨʔϯͳϋογϡΑΓ༧ظ͠ͳ͍͜ͱ͕ى ͖Δ w CMFTTFEIBTIඞཁͳ͚Ε 4UPSBCMFΛΘͳ͍΄͏͕͍͍
+40/ʹ͢Ε҆શʁ w ͓͓ΉͶͦ͏ w σγϦΞϥΠζͷΈͰى͖ͳ͍ w +40/ 42-JOKFDUJPO w จࣈྻ͕དྷΔͱࢥͬͯΔՕॴʹϋογϡྻ
͕ೖΔ͜ͱͰ༧ظ͠ͳ͍ಈ࡞͕ى͜ΔՄೳੑ
4UPSBCMFͷಛච͖͢ w ҙͷϞδϡʔϧͷϩʔυ͕Մೳ w PWFSMPBE͕ΘΕ͍ͯΔΦϒδΣΫτΛGSFF[F͢Δͱɺ PWFSMPBEϑϥά͖Ͱอଘ͞ΕΔ w PWFSMPBEϑϥά͕͍͍ͯΔ4UPSBCMFEPDVNFOUΛ ϩʔυ͢ΔࡍʹɺಁաతʹϞδϡʔϧΛϩʔυ͢Δ w
ຊདྷͳΒPWFSMPBE͕ΘΕ͍ͯͳ͍ϞδϡʔϧͰɺ͜ ͷϑϥάΛઃఆ͢Δ͜ͱͰɺҙͷϞδϡʔϧΛϩʔυ Մೳ
͜ΕطͷͰ͋Δ w NBTUFSJOHQFSMPSHUIFTUPSBCMF TFDVSJUZQSPCMFN w ۙʹͳͬͯEPDVNFOUʹॻ͔Εͨ w IUUQQFSMHJUQFSMPSHQFSMHJUDPNNJU GBDCCECGFEEB DFF
σετϥΫλ࣮ߦ 㲈ҙίʔυ࣮ߦ w σετϥΫλ࣮ߦͰग़དྷΔ͜ͱ͕ݶΒΕΔ w యܕతͳͷҰ࣌ϑΝΠϧআ ˠҙϑΝΠϧআ w ͤΊͯϑΝΠϧॻ͖ࠐΈ͕ग़དྷΕɾɾɾ w
ѱ༻Ͱ͖ͦ͏ͳ$1"/ϞδϡʔϧΛ୳͢
ݬͷҙίʔυ࣮ߦՄೳϞδϡʔϧΛ୳ͯ͠ w σετϥΫλͰίʔυ࣮ߦͰ͖ͦ͏ͳͷΛ୳ ͢ w FWBMTFMG\DPEF^ w PQFO ') TFMG\pMFOBNF^
w TZTUFN FYFD EP HMPC FUD w ͦ͏ͦ͏ͳ͍Α
ϑΝΠϧͷॻ͖ࠐΈ w ϑΝΠϧͷॻ͖ࠐΈ͕ग़དྷΕɺQNϑΝΠϧ Λੜͯ͠ϩʔυͯ͠Εҙίʔυ࣮ߦग़ དྷΔͷͰͳ͍͔ʁ w ࣮ࡍͷΞϓϦέʔγϣϯVTFMJCͯ͠Δ͜ͱ͕ ଟ͍ MJCMPDBM
w ΧϨϯτσΟϨΫτϦҎԼͷϑΝΠϧʹ͋Δఔ ࣗ༝ͳϑΥʔϚοτͰॻ͖ࠐΈ͕ग़དྷΕɻɻ
σετϥΫλͰϑΝΠϧʹॻ͖ࠐΉ $1"/Ϟδϡʔϧ w ࣮ࡏͨ͠ w HSFQ͠·ͬͯ͘ൃݟ w ࣗಈηʔϒϩάϑΝΠϧͷqVTIܥͷػೳ w QNϑΝΠϧΛੜͯ͠ϩʔυ·ͰՄೳ
w ςϯϓϨʔτվ᜵͔Βҙίʔυ࣮ߦ͕Մೳ
4UPSBCMFͰͷίʔυ࣮ߦ w ਂࠁ্͕͕ͬͨͱߟ͑ͯྑ͍ જࡏతҙίʔυ࣮ߦˠ࣮֬ͳҙίʔυ࣮ߦ w ਖ਼֬ʹʮΠϯετʔϧ͞Ε͍ͯΔϞδϡʔϧ࣍ୈͰ ҙίʔυ࣮ߦ͕Մೳʯ w ͔ͳΓଟ͘ͷڥͰΠϯετʔϧ͞Ε͍ͯΔϞδϡʔϧ
ͰՄೳͩͬͨ w QFSMTFDVSJUZʹใࠂ FYQMPJUެ։͕ద͔Ͳ͏͔૬ஊ த
·ͱΊ w 4UPSBCMF ͱ͍͏͔CMFTTFEIBTIΛ෮ݩͰ͖Δ γϦΞϥΠβҙίʔυ࣮ߦʹܨ͕Δةݥ͕ ͋Δ w "NPOͱ1MBDL.JEEMFXBSF4FTTJPOΛ֘͢ Δ͍ํͯ͠ΔਓΞφϯεಡΜͰରԠͯ͠Ͷɻ w
)BQQZ)BDLJOH