{"id":30830,"date":"2015-06-18T12:39:02","date_gmt":"2015-06-18T03:39:02","guid":{"rendered":"http:\/\/www.softantenna.com\/wp\/?p=30830"},"modified":"2015-06-18T12:39:02","modified_gmt":"2015-06-18T03:39:02","slug":"ios-osx-security-flaws","status":"publish","type":"post","link":"https:\/\/softantenna.com\/blog\/ios-osx-security-flaws\/","title":{"rendered":"\u3010\u60b2\u5831\u3011iOS \/ OS X\u306b\u3001\u30d1\u30b9\u30ef\u30fc\u30c9\u7b49\u6a5f\u5bc6\u60c5\u5831\u3092\u76d7\u307f\u53d6\u308b\u3053\u3068\u304c\u3067\u304d\u308b\u8d85\u91cd\u5927\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8106\u5f31\u6027\u304c\u767a\u898b\u3055\u308c\u308b"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/softantenna.com\/blog\/wp-content\/uploads\/2015\/06\/INewImage88.png\" alt=\"NewImage\" title=\"NewImage.png\" border=\"0\" width=\"545\" height=\"292\" \/><\/p>\n<p>\u30a4\u30f3\u30c7\u30a3\u30a2\u30ca\u5927\u5b66\u3068\u30b8\u30e7\u30fc\u30b8\u30a2\u5de5\u79d1\u5927\u5b66\u306b\u5728\u7c4d\u3059\u308b6\u4eba\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u7814\u7a76\u8005\u304c\u3001iOS\u3068OS X\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u3092<a href=\"https:\/\/drive.google.com\/file\/d\/0BxxXk1d3yyuZOFlsdkNMSGswSGs\/view\">\u767a\u8868<\/a>\u3057\u8a71\u984c\u3068\u306a\u3063\u3066\u3044\u307e\u3059(<a href=\"http:\/\/9to5mac.com\/2015\/06\/17\/major-zero-day-security-flaws-in-ios-os-x-allow-theft-of-both-keychain-and-app-passwords\/\">9to5Mac<\/a>\u3001<a href=\"http:\/\/www.macrumors.com\/2015\/06\/17\/ios-osx-cross-app-keychain-security-flaw\/\">MacRumors<\/a>\u3001<a href=\"http:\/\/arstechnica.com\/security\/2015\/06\/serious-os-x-and-ios-flaws-let-hackers-steal-keychain-1password-contents\/\">Ars Technica<\/a>)\u3002<\/p>\n<p>\u305d\u306e\u8106\u5f31\u6027\u3068\u306f\u3001\u30b5\u30f3\u30c9\u30dc\u30c3\u30af\u30b9\u74b0\u5883\u306b\u3042\u308b\u30a2\u30d7\u30ea(App Store\u3067\u516c\u958b\u3055\u308c\u3066\u3044\u308bApple\u306e\u5be9\u67fb\u3092\u901a\u904e\u3057\u305f\u30a2\u30d7\u30ea)\u304c\u3001iCloud\u30d1\u30b9\u30ef\u30fc\u30c9\u3084\u3001Evernote\u3001Facebook\u30011Password\u3001\u305d\u306e\u4ed6\u306e\u30a2\u30d7\u30ea\u306e\u6a5f\u5bc6\u60c5\u5831\u3001Chrome\u306e\u4fdd\u5b58\u3055\u308c\u305f\u30d1\u30b9\u30ef\u30fc\u30c9\u7b49\u3092\u4e0d\u6b63\u306b\u53d6\u5f97\u3067\u304d\u3066\u3057\u307e\u3046\u3068\u3044\u3046\u3082\u306e\u3002 <\/p>\n<p>OS X\u306eKeychain\u3068WebSocket\u3001iOS\u3068OS X\u306eURL Scheme\u3068\u3044\u3063\u305f\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u9593\u901a\u4fe1\u6a5f\u80fd\u306b\u8106\u5f31\u6027\u304c\u5b58\u5728\u3057\u3066\u3044\u308b\u3088\u3046\u3067\u3001\u3053\u306e\u8106\u5f31\u6027\u3092\u5229\u7528\u3057\u3001\u5b9f\u969b\u306bChrome\u304cKeychain\u306b\u4fdd\u5b58\u3057\u305f\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u3001\u4e0d\u6b63\u30a2\u30d7\u30ea\u304c\u53d6\u5f97\u3059\u308b\u30c7\u30e2\u52d5\u753b\u3082\u516c\u958b\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n<p><iframe width=\"560\" height=\"315\" src=\"https:\/\/www.youtube.com\/embed\/IYZkAIIzsIo\" frameborder=\"0\" allowfullscreen><\/iframe><\/p>\n<p><!--more--><\/p>\n<h2>\u6709\u52b9\u306a\u5bfe\u7b56\u306f\u3044\u307e\u306e\u3068\u3053\u308d\u7121\u3044\uff1f<\/h2>\n<p>\u6b8b\u5ff5\u306a\u304c\u3089\u3001OS\u306e\u8106\u5f31\u6027\u306a\u306e\u3067\u3001Apple\u304c\u4fee\u6b63\u30d1\u30c3\u30c1\u3092\u516c\u958b\u3059\u308b\u307e\u3067\u3001\u30e6\u30fc\u30b6\u30fc\u304c\u5b9f\u884c\u53ef\u80fd\u306a\u7c21\u5358\u306a\u5bfe\u7b56\u306f\u3042\u307e\u308a\u306a\u3044\u69d8\u5b50\u3002<\/p>\n<p>\u3068\u308a\u3042\u3048\u305a\u3001\u602a\u3057\u3044\u30a2\u30d7\u30ea\u306f\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u306a\u3044\u3053\u3068(App Store\u306b\u767b\u9332\u3055\u308c\u3066\u3044\u308b\u30a2\u30d7\u30ea\u3067\u3055\u3048\u5371\u967a\u6027\u304c\u3042\u308b\uff01)\u3001\u304a\u3088\u3073\u30d6\u30e9\u30a6\u30b6\u30fc\u306b\u9280\u884c\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u306a\u3069\u8d85\u91cd\u8981\u306a\u60c5\u5831\u3092\u4fdd\u5b58\u3057\u306a\u3044\u3053\u3068\u3001\u306a\u3069\u304c\u63a8\u5968\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/blog.agilebits.com\/2015\/06\/17\/1password-inter-process-communication-discussion\/\">1Password\u306e\u30d6\u30ed\u30b0<\/a>\u306b\u3082\u8106\u5f31\u6027\u306e\u5f71\u97ff\u3084\u5bfe\u7b56\u304c\u63b2\u8f09\u3055\u308c\u3066\u3044\u307e\u3059\u306e\u3067\u3001\u30e6\u30fc\u30b6\u30fc\u306f\u53c2\u8003\u306b\u3059\u308b\u3068\u826f\u3044\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n<p>\u3061\u306a\u307f\u306b\u7814\u7a76\u8005\u3089\u306f\u30012\u6708\u306b\u8106\u5f31\u6027\u3092\u767a\u898b\u3057\u3066\u3001Apple\u306b\u9023\u7d61\u6e08\u307f\u3067\u3001\u305d\u306e\u5f8c\u8106\u5f31\u6027\u304c\u4fee\u6b63\u3055\u308c\u306a\u3044\u307e\u307e\u306b\u306a\u3063\u3066\u3044\u308b\u306e\u306b\u696d\u3092\u716e\u3084\u3057\u3066\u4eca\u56de\u306e\u767a\u8868\u306b\u81f3\u3063\u305f\u3088\u3046\u3067\u3059\u3002Apple\u304c\u4fee\u6b63\u3092\u6020\u3063\u305f\u306e\u304b\u3001\u305d\u308c\u3068\u3082\u671f\u9593\u5185\u306b\u4fee\u6b63\u3059\u308b\u3053\u3068\u304c\u4e0d\u53ef\u80fd\u3060\u3063\u305f\u306e\u304b\u3001<a href=\"http:\/\/www.reddit.com\/r\/programming\/comments\/3a68wt\/passwordkiller_0days_for_ios_and_os_x\/\">Reddit<\/a>\u3084<a href=\"https:\/\/news.ycombinator.com\/item?id=9730944\">Hacker News<\/a>\u3067\u3082\u610f\u898b\u304c\u5206\u304b\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u30a4\u30f3\u30c7\u30a3\u30a2\u30ca\u5927\u5b66\u3068\u30b8\u30e7\u30fc\u30b8\u30a2\u5de5\u79d1\u5927\u5b66\u306b\u5728\u7c4d\u3059\u308b6\u4eba\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u7814\u7a76\u8005\u304c\u3001iOS\u3068OS X\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u3092\u767a\u8868\u3057\u8a71\u984c\u3068\u306a\u3063\u3066\u3044\u307e\u3059(9to5Mac\u3001MacRumors\u3001Ars Technica)\u3002 \u305d\u306e\u8106 [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":30829,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"swell_btn_cv_data":"","footnotes":""},"categories":[46,4,75],"tags":[3303,8],"class_list":["post-30830","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ios","category-mac","category-software","tag-ios","tag-osx"],"_links":{"self":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/posts\/30830","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/comments?post=30830"}],"version-history":[{"count":0,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/posts\/30830\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/media\/30829"}],"wp:attachment":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/media?parent=30830"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/categories?post=30830"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/tags?post=30830"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}