{"id":29421,"date":"2015-04-22T00:55:06","date_gmt":"2015-04-21T15:55:06","guid":{"rendered":"http:\/\/www.softantenna.com\/wp\/?p=29421"},"modified":"2015-04-22T00:55:07","modified_gmt":"2015-04-21T15:55:07","slug":"1500-ios-apps-have-https-bug","status":"publish","type":"post","link":"https:\/\/softantenna.com\/blog\/1500-ios-apps-have-https-bug\/","title":{"rendered":"1500\u500b\u306eiOS\u30a2\u30d7\u30ea\u306b\u81f4\u547d\u7684\u306aHTTPS\u30d0\u30b0\u304c\u5b58\u5728 - \u4e2d\u9593\u8005\u653b\u6483\u306e\u5371\u967a\u6027"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/softantenna.com\/blog\/wp-content\/uploads\/2015\/04\/INewImage80.png\" alt=\"NewImage\" title=\"NewImage.png\" border=\"0\" width=\"545\" height=\"261\" \/><\/p>\n<p>\u304a\u3088\u305d1500\u306eiOS\u30a2\u30d7\u30ea\u306b\u3001HTTPS\u306b\u95a2\u9023\u3057\u305f\u81f4\u547d\u7684\u306a\u4e0d\u5177\u5408\u304c\u5b58\u5728\u3057\u3066\u3044\u308b\u3053\u3068\u304c\u3001\u30ea\u30b5\u30fc\u30c1\u4f01\u696dSourceDNS\u306b\u3088\u3063\u3066\u660e\u3089\u304b\u306b\u3055\u308c\u307e\u3057\u305f(<a href=\"https:\/\/sourcedna.com\/blog\/20150420\/afnetworking-vulnerability.html\">SourceDNS<\/a>\u3001<a href=\"http:\/\/arstechnica.com\/security\/2015\/04\/1500-ios-apps-have-https-crippling-bug-is-one-of-them-on-your-device\/\">Ars Technica<\/a>\u3001<a href=\"http:\/\/9to5mac.com\/2015\/04\/21\/ios-apps-man-in-the-middle\/\">9to5Mac<\/a>)\u3002<\/p>\n<p>\u3053\u306e\u4e0d\u5177\u5408\u306f\u3001\u4eca\u5e742\u6708\u306b\u30ea\u30ea\u30fc\u30b9\u3055\u308c\u305f\u3001iOS\u7528\u306e\u8457\u540d\u306a\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30e9\u30a4\u30d6\u30e9\u30ea\u300c<a href=\"https:\/\/github.com\/AFNetworking\/AFNetworking\">AFNetworking<\/a>\u300d\u306e\u30d0\u30fc\u30b8\u30e7\u30f32.5.1\u3092\u539f\u56e0\u3068\u3059\u308b\u3082\u306e\u3067\u3001\u8a3c\u660e\u66f8\u306e\u691c\u8a3c\u306b\u4e0d\u5177\u5408\u304c\u5b58\u5728\u3059\u308b\u305f\u3081\u3001\u60aa\u610f\u306e\u7b2c\u4e09\u8005\u306b\u3088\u308b\u4e2d\u9593\u8005\u653b\u6483\u304c\u53ef\u80fd\u3068\u306a\u3063\u3066\u3044\u308b\u3068\u3044\u3046\u3082\u306e\u3067\u3059(\u3069\u306e\u3088\u3046\u306a\u4e0d\u5177\u5408\u304b\u306f<a href=\"http:\/\/blog.mindedsecurity.com\/2015\/03\/ssl-mitm-attack-in-afnetworking-251-do.html\">\u3053\u3053<\/a>\u3067\u89e3\u8aac\u3055\u308c\u3066\u3044\u307e\u3059)\u3002<\/p>\n<h2>AFNetworking 2.5.2\u3067\u3059\u3067\u306b\u4fee\u6b63\u6e08\u307f\u3060\u304c\u2026<\/h2>\n<p>\u30d0\u30b0\u306fAFNetworking 2.5.2\u3067\u3059\u3067\u306b\u4fee\u6b63\u3055\u308c\u3066\u3044\u307e\u3059\u304c\u3001\u3044\u307e\u3060AFNetworking 2.5.1\u3092\u4f7f\u7528\u3057\u3066\u3044\u308b1500\u500b\u306e\u30a2\u30d7\u30ea\u306f\u3001\u3053\u306e\u4e0d\u5177\u5408\u306e\u8105\u5a01\u306b\u3055\u3089\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u306b\u306a\u308a\u307e\u3059\u3002\u5177\u4f53\u7684\u306a\u30a2\u30d7\u30ea\u306e\u540d\u524d\u3068\u3057\u3066\u3001<a href=\"https:\/\/itunes.apple.com\/us\/app\/citrix-openvoice-audio-conferencing\/id875930710?mt=8\">Citrix OpenVoice Audio Conferencing<\/a>\u3001<a href=\"https:\/\/itunes.apple.com\/us\/app\/alibaba.com\/id503451073?mt=8\">Alibaba.com mobile app<\/a>\u3001<a href=\"https:\/\/itunes.apple.com\/us\/app\/movies-by-flixster-rotten\/id284235722?mt=8\">Movies by Flixster with Rotten Tomatoes<\/a><a href=\"https:\/\/itunes.apple.com\/us\/app\/kybankagent-3.0\/id445795423?mt=8\">KYBankAgent 3.0<\/a><a href=\"https:\/\/itunes.apple.com\/us\/app\/revo-restaurant-pos.-fastest\/id942396398?mt=8\">Revo Restaurant Point of Sale<\/a>\u306a\u3069\u304c\u6319\u3052\u3089\u308c\u3066\u3044\u3066\u3001SourceDNS\u304c\u516c\u958b\u3057\u3066\u3044\u308b<a href=\"http:\/\/searchlight.sourcedna.com\/lookup\">\u8106\u5f31\u6027\u30a2\u30d7\u30ea\u78ba\u8a8d\u30c4\u30fc\u30eb<\/a>\u3092\u4f7f\u3063\u3066\u3001\u3053\u306e\u4e0d\u5177\u5408\u304c\u5f71\u97ff\u3059\u308b\u30a2\u30d7\u30ea\u3092\u78ba\u8a8d\u3059\u308b\u3053\u3068\u3082\u3067\u304d\u307e\u3059\u3002<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/softantenna.com\/blog\/wp-content\/uploads\/2015\/04\/ISourceDNA_App_Security.png\" alt=\"SourceDNA App Security\" title=\"SourceDNA_App_Security.png\" border=\"0\" width=\"545\" height=\"240\" \/><\/p>\n<p>iOS\u30c7\u30d0\u30a4\u30b9\u5168\u4f53\u304c\u8106\u5f31\u6027\u306b\u3055\u3089\u3055\u308c\u308b\u308f\u3051\u3067\u306f\u306a\u304f\u3001\u3042\u304f\u307e\u3067\u3082AFNetworking 2.5.1\u3092\u4f7f\u3063\u3066\u3044\u308b\u30a2\u30d7\u30ea\u306e\u56fa\u6709\u306e\u6a5f\u5bc6\u30c7\u30fc\u30bf\u304c\u5f71\u97ff\u3092\u53d7\u3051\u308b\u4e0d\u5177\u5408\u3067\u3059\u304c\u3001\u6c17\u306b\u306a\u308b\u65b9\u306f\u78ba\u8a8d\u3057\u3066\u307f\u305f\u307b\u3046\u304c\u5b89\u5168\u304b\u3082\u3057\u308c\u307e\u305b\u3093\u3002<\/p>\n<p>\u3082\u3061\u308d\u3093\u30a2\u30d7\u30ea\u958b\u767a\u8005\u3067AFNetworking 2.5.1\u3092\u4f7f\u3063\u3066\u3044\u308b\u65b9\u306f\u305f\u3060\u3061\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3057\u305f\u307b\u3046\u304c\u826f\u3044\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u304a\u3088\u305d1500\u306eiOS\u30a2\u30d7\u30ea\u306b\u3001HTTPS\u306b\u95a2\u9023\u3057\u305f\u81f4\u547d\u7684\u306a\u4e0d\u5177\u5408\u304c\u5b58\u5728\u3057\u3066\u3044\u308b\u3053\u3068\u304c\u3001\u30ea\u30b5\u30fc\u30c1\u4f01\u696dSourceDNS\u306b\u3088\u3063\u3066\u660e\u3089\u304b\u306b\u3055\u308c\u307e\u3057\u305f(SourceDNS\u3001Ars Technica\u30019to5Mac)\u3002 \u3053\u306e\u4e0d\u5177 [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":29419,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"swell_btn_cv_data":"","footnotes":""},"categories":[46,75],"tags":[264,2600,3303],"class_list":["post-29421","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ios","category-software","tag-app","tag-https","tag-ios"],"_links":{"self":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/posts\/29421","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/comments?post=29421"}],"version-history":[{"count":0,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/posts\/29421\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/media\/29419"}],"wp:attachment":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/media?parent=29421"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/categories?post=29421"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/tags?post=29421"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}