IT |
気になる、記になる… |
Amazon、ワイヤレスイヤホン「Echo Buds (第2世代)」を国内で販売開始 |
https://taisy0.com/2022/02/16/152160.html
|
amazon |
2022-02-16 14:55:59 |
ROBOT |
ロボスタ |
【速報】NVIDIAとジャガー・ランドローバーが自動運転のパートナーシップを発表 2025年の全新型モデルにAI機能を搭載 |
https://robotstart.info/2022/02/16/nvidia-jaguar-landrover.html
|
【速報】NVIDIAとジャガー・ランドローバーが自動運転のパートナーシップを発表年の全新型モデルにAI機能を搭載シェアツイートはてブNVIDIAは報道関係者向けブリーフィングをグローバル向けに開催し、ジャガー・ランドローバーとのパートナーシップを発表した。 |
2022-02-16 14:00:39 |
IT |
ITmedia 総合記事一覧 |
[ITmedia PC USER] Windows 11の一般ユーザー向けに新しい「メモ帳」と「メディアプレイヤー」を提供開始 |
https://www.itmedia.co.jp/pcuser/articles/2202/16/news188.html
|
itmediapcuserwindows |
2022-02-16 23:45:00 |
python |
Pythonタグが付けられた新着投稿 - Qiita |
【PythonでExcel操作】Openpyxlで「列のコピー」と「コピーしたセルを挿入」する |
https://qiita.com/AkioTakamoto/items/5c5cb1713e26e39a99ce
|
例D列をコピーし、F列とG列の間に挿入した結果合計セルの計算式SUMセル範囲も更新され、挿入した列の分まで自動計算されます単純にOpenpyxlの列の挿入と値コピーした場合importopenpyxlFileinxlsxsrc列目条件B列をコピーdest列目条件C列の右に挿入wbopenpyxlloadworkbookFilewswbactive列を挿入wsinsertcolsdestforiinrangewsmaxcolumnセルの値をコピーwscellrowicolumndestvaluewscellrowicolumnsrcvaluewbsaveoutxlsx問題点セルの属性がコピーされないため、文字が小さかったりセルの色・罫線がついてなく見栄えがわるい列が増えても合計列のセルに書かれてあるSUMセルの範囲関数のセルの範囲が変わらないFの値が、SUMDDとなっていてF列の合計になっていない改良セルの書式すべてをコピーするwscellrowicolumndeststylecopywscellrowicolumnsrcstyleセルが数式の場合、数式の列文字を更新するはじめに、D列の合計SUMDDの文字列を、F列にコピーしたので、SUMFFの文字列に変換します。 |
2022-02-16 23:37:24 |
js |
JavaScriptタグが付けられた新着投稿 - Qiita |
Rails6系+Vue3系で"Hello, Vue3!" |
https://qiita.com/bumpfuji10/items/40cc7e6a2de2d15d92ca
|
といっても読者の方はまだVueをインストールしていないと思うので確認する必要もないと思いますが。 |
2022-02-16 23:16:27 |
Ruby |
Rubyタグが付けられた新着投稿 - Qiita |
Rails6系+Vue3系で"Hello, Vue3!" |
https://qiita.com/bumpfuji10/items/40cc7e6a2de2d15d92ca
|
といっても読者の方はまだVueをインストールしていないと思うので確認する必要もないと思いますが。 |
2022-02-16 23:16:27 |
AWS |
AWSタグが付けられた新着投稿 - Qiita |
Amazon Managed Streaming for Apache Kafka(MSK) 概要 |
https://qiita.com/zumastee/items/897ffcf1fa623a639fde
|
サーバーのプロビジョニングApacheKafkaクラスターの設定障害時のサーバーの交換サーバーのパッチとアップグレードのオーケストレート高可用性のためのクラスターの構築データの永続的な保存とセキュリティの確保モニタリングとアラームの設定負荷変動をサポートするためのスケーリングの実行オープンソースで安全性の高いApacheKafkaクラスターを複数のアベイラビリティーゾーンAZに分散して提供し、耐障害性と可用性の高いストリーミングストレージを実現する。 |
2022-02-16 23:41:04 |
AWS |
AWSタグが付けられた新着投稿 - Qiita |
Cloud Watch Alermの設定周りがよくわからなかったのでまとめる(Terraform) |
https://qiita.com/hengineer/items/382c4f45b83cedfaea85
|
例えばで設定した場合、秒に回メトリクスの状態を評価することになる。 |
2022-02-16 23:13:11 |
Ruby |
Railsタグが付けられた新着投稿 - Qiita |
[個人開発] 数学好きのためのWebアプリを作ってみた (Rails + Typescript) |
https://qiita.com/SNKK62/items/2dda7f65213392848a4b
|
このアプリは数学が好きな人にとってはとても楽しめるアプリになっていると思います。 |
2022-02-16 23:36:21 |
Ruby |
Railsタグが付けられた新着投稿 - Qiita |
Rails6系+Vue3系で"Hello, Vue3!" |
https://qiita.com/bumpfuji10/items/40cc7e6a2de2d15d92ca
|
といっても読者の方はまだVueをインストールしていないと思うので確認する必要もないと思いますが。 |
2022-02-16 23:16:27 |
技術ブログ |
Developers.IO |
MUIのDataGridをLocalizationしてみた |
https://dev.classmethod.jp/articles/localization-of-mui-datagrid/
|
datagrid |
2022-02-16 14:57:37 |
技術ブログ |
Developers.IO |
AWS S3 Batch Replicationを使用して既存のオブジェクトを別アカウントのバケットにレプリケートしてみた! |
https://dev.classmethod.jp/articles/aws-s3-batch-replication-to-replicate-an-existing-object-to-a-bucket-in-another-account/
|
awssbatchreplication |
2022-02-16 14:16:31 |
海外TECH |
MakeUseOf |
5 Games With Long Single-Player Campaign Play Times |
https://www.makeuseof.com/games-with-long-single-player-campaigns/
|
campaign |
2022-02-16 14:45:12 |
海外TECH |
MakeUseOf |
12 Simple 3D Models for Blender Beginners |
https://www.makeuseof.com/blender-models-for-beginners/
|
blender |
2022-02-16 14:30:11 |
海外TECH |
MakeUseOf |
Anyone Can Hack Your Snapchat—Here's How to Stop Them |
https://www.makeuseof.com/how-to-hack-snapchat/
|
snapchat |
2022-02-16 14:15:11 |
海外TECH |
DEV Community |
Predictive Analytics Architecture on AWS |
https://dev.to/aws-builders/predictive-analytics-architecture-on-aws-3ljc
|
Predictive Analytics Architecture on AWSAWS includes the components needed to enable pipelines for predictive analytics workflows There are many viable architectural patterns to effectively compute predictive analytics In this section we discuss some of the technology options for building predictive analytics architecture on AWS for Media and Entertainment Industry M amp E Figure shows one such conceptual architecture Figure ーConceptual reference architecture Data Sources and Data IngestionData collection and ingestion is the first step and one of the most important technical architecture components to the overall predictive analytics architecture At a high level the main source data required for M amp E analytics can be classified into the following categories Dimension data ーProvides structured labeling information to numeric measures Dimension data is mainly used for grouping filtering and labeling of information Examples of dimension data are customer master data demographics data transaction or subscription data content metadata and other reference data These are mostly structured data stored in relational databases such as CRM Master Data Management MDM or Digital Asset Management DAM databases Social media data ーCan be used for sentiment analysis Some of the main social data sources for M amp E are Twitter YouTube and Facebook The data could encompass content ratings reviews social sharing tagging and bookmarking events Event data ーIn OTT and online media examples of event data are audience engagement behaviors with streaming videos such as web browsing patterns searching events for content video play watch stop events and device data These are mostly real time click streaming data from websites mobile apps and OTT players Other relevant data ーIncludes data from aggregators Nielson comScore etc advertising response data customer contacts and service case data There are two main modes of data ingestion into AWS batch and streaming Batch IngestionIn this mode data is ingested as files e g database extracts following a specified schedule Data ingestion approaches include the following Third party applications ーThese applications have connector integration with Amazon Simple Storage Service Amazon S object storage that can ingest data into Amazon S buckets The applications can either take source files or extract data from the source database directly and store them in Amazon S There are commercial products e g Informatica Talend and open source utilities e g Embulk that can extract data from databases and export the data into an Amazon S bucket directly Custom applications using AWS SDK APIs ーCustom applications can use AWS SDKs and the Amazon S application programming interface API to ingest data into target Amazon S buckets The SDKs and API also support multipart upload for faster data transfer to Amazon S buckets AWS Data Pipeline ーThis service facilitates moving data between different sources including AWS services AWS Data Pipeline launches a task runner that is a Linux based Amazon Elastic Compute Cloud Amazon EC instance which can run scripts and commands to move data on an event based or scheduled basis Command line interface CLI ーAmazon S also provides a CLI for interacting and ingesting data into Amazon S buckets File synchronization utilities ーUtilities such as rsynch and ssynch can keep source data directories in sync with Amazon S buckets as a way to move files from source locations to Amazon S buckets Streaming IngestionIn this mode data is ingested in streams e g clickstream data Architecturally there must be a streaming store that accepts and stores streaming data at scale and in real time Additionally data collectors that collect data at the sources are needed to send data to the streaming store Streaming stores ーThere are various options for the streaming stores Amazon Kinesis Streams and Amazon Kinesis Firehose are fully managed streaming stores Streams and Firehose also provide SDKs and APIs for programmatic integration Alternatively open source platforms such as Kafka can be installed and configured on EC clusters to manage streaming data ingestion and storage Data collectors ーThese can be web mobile or OTT applications that send data directly to the streaming store or collector agents running next to the data sources e g clickstream logs that send data to the streaming store in real time There are several options for the data collectors Flume and Flentd are two open source data collectors that can collect log data and send data to streaming stores An Amazon Kinesis agent can be used as the data collector for Streams and Firehose One common practice is to ingest all the input data into staging Amazon S buckets or folders first perform further data processing and then store the data in target Amazon S buckets or folders Any data processing related to data quality e g data completeness invalid data should be handled at the sources when possible and is not discussed in this document During this stage the following data processing might be needed Data transformation ーThis could be transformation of source data to the defined common standards For example breaking up a single name field into first name middle name and last name fields Metadata extraction and persistence ーAny metadata associated with input files should be extracted and stored in a persistent store This could include file name file or record size content description data source information and date or time information Data enrichment ーRaw data can be enhanced and refined with additional information For example you can enrich source IP addresses with geographic data Table schema creation and maintenance ーOnce the data is processed into a target structure you can create the schemas for the target systems File FormatsThe various file formats have tradeoffs regarding compatibility storage efficiency read performance write performance and schema extensibility In the Hadoop ecosystem there are many variations of file based data stores The following are some of the more common ones in use Comma Separated Values CSV ーCSV typically the lowest common denominator of file formats excels at providing tremendous compatibility between platforms It s a common format for going into and out of the Hadoop ecosystem This file type can be easily inspected and edited with a text editor which provides flexibility for ad hoc usage One drawback is poor support for compression so the files tend to take up more storage space than some other available formats You should also note that CSV sometimes has a header row with column names Avoid using this with machine learning tools because it inhibits the ability to arbitrarily split files JavaScript Object Notation JSON ーJSON is similar to CSV in that text editors can consume this format easily JSON records can be stored using a delimiter such as a newline character as a demarcation to split large data sets across multiple files However JSON files include some additional metadata whereas CSV files typically do not when used in Hadoop JSON files with one record should be avoided because this would generally result in too many small files Apache Parquet ーA columnar storage format that is integrated into much of the Hadoop ecosystem Parquet allows for compression schemes to be specified on a per column level This provides the flexibility to take advantage of compression in the right places without the penalty of wasted CPU cycles compressing and decompressing data that doesn t need compressing Parquet is also flexible for encoding columns Selecting the right encoding mechanism is also important to maximize CPU utilization when reading and writing data Because of the columnar format Parquet can be very efficient when processing jobs that only require reading a subset of columns However this columnar format also comes with a write penalty if your processing includes writes Apache Avro ーAvro can be used as a file format or as an object format that is used within a file format such as Parquet Avro uses a binary data format requiring less space to represent the same data in a text format This results in lower processing demands in terms of I O and memory Avro also has the advantage of being compressible further reducing the storage size and increasing disk read performance Avro includes schema data and data that is defined in JSON while still being persisted in a binary format The Avro data format is flexible and expressive allowing for schema evolution and support for more complex data structures such as nested types Apache ORC ーAnother column based file format designed for high speed within Hadoop For flat data structures ORC has the advantage of being optimized for reads that use predicates in WHERE clauses in Hadoop ecosystem queries It also compresses quite efficiently with compression schemes such as Snappy Zlib or GZip Sequence files ーHadoop often uses sequence files as temporary files during processing steps of a MapReduce job Sequence files are binary and can be compressed to improve performance and reduce required storage volume Sequence files are stored row based with sync ending markers enabling splitting However any edits will require the entire file to be rewritten Data StoreFor the data store portion of your solution you need storage for the data derived data lake schemas and a metadata data catalogue As part of that a critical decision to make is the type or types of data file formats you will process Many types of object models and storage formats are used for machine learning Common storage locations include databases and files From a storage perspective Amazon S is the preferred storage option for data science processing on AWS Amazon S provides highly durable storage and seamless integration with various data processing services and machine learning platforms on AWS Data Lake SchemasData lake schemas are Apache HIVE tables that support SQL like data querying using Hadoop based query tools such as Apache HIVE Spark SQL and Presto Data lake schemas are based on the schema on read design which means table schemas can be created after the source data is already loaded into the data store A data lake schema uses a HIVE metastore as the schema repository which can be accessed by different query engines In addition the tables can be created and managed using the HIVE engine directly Metadata Data CatalogueA metadata data catalogue contains information about the data in the data store It can be loosely categorized into three areas technical operational and business Technical metadata refers to the forms and structure of the data In addition to data types technical metadata can also contain information about what data is valid and the data s sensitivity Operational metadata captures information such as the source of the data time of ingestion and what ingested the data Operational metadata can show data lineage movement and transformation Business metadata provides labels and tags for data with business level attributes to make it easier for someone to search and browse data in the data store There are different options to process and store metadata on AWS One way is to trigger AWS Lambda functions by using Amazon S events to extract or derive metadata from the input files and store metadata in Amazon DynamoDB Processing by Data ScientistsWhen all relevant data is available in the data store data scientists can perform offline data exploration and model selection data preparation and model training and generation based on the defined business objectives The following solutions were selected because they are ideal for handling the large amount of data M amp E use cases generate Interactive Data ExplorationTo develop the data understanding needed to support the modeling process data scientists often must explore the available datasets and determine their usefulness This is normally an interactive and iterative process and requires tools that can query data quickly across massive amounts of datasets It is also useful to be able to visualize the data with graphs charts and maps Table provides a list of data exploration tools available on AWS followed by some specific examples that can be used to explore the data interactively Table Data exploration tool options on AWSQuery StyleQuery EngineUser Interface ToolsAWS ServicesSQLPrestoAirPal JDBC ODBC Clients Presto CLIEMRSpark SQLZeppelin Spark Interactive ShellEMRApache HIVEApache HUE HIVE Interactive ShellEMRProgrammaticR SparkR R RStudio R Interactive ShellSpark PySpark Scala Zeppelin Spark Interactive ShellEMR Presto on Amazon EMRThe M amp E datasets can be stored in Amazon S and are accessible as external HIVE tables An external Amazon RDS database can be deployed for the HIVE metastore data Presto running in an Amazon EMR cluster can be used to run interactive SQL queries against the datasets Presto supports ANSI SQL so you can run complex queries as well as aggregation against any dataset size from gigabytes to petabytes Java Database Connectivity JDBC and Open Database Connectivity ODBC drivers support connections from data visualization tools such as Qlikview Tableau and Presto for rich data visualization Web tools such as AirPal provide an easy to use web front end to run Presto queries directly Figure ーData exploration with Presto Apache Zeppelin with Spark on EMRAnother tool for data exploration is Apache Zeppelin notebook with Spark Spark is a general purpose cluster computing system It provides high level APIs for Java Python Scala and R Spark SQL an in memory SQL engine can integrate with HIVE external tables using HiveContext to query the dataset Zeppelin provides a friendly user interface to interact with Spark and visualize data using a range of charts and tables Spark SQL can also support JDBC ODBC connectivity through a server running Thrift Figure ーData exploration with Zeppelin R SparkR on EMRSome data scientists like to use R RStudio as the tool for data exploration and analysis but feel constrained by the limitations of R such as single threaded execution and small data size support SparkR provides both the interactive environment rich statistical libraries and visualization of R Additionally SparkR provides the scalable fast distributed storage and processing capability of Spark SparkR uses DataFrames as the data structure which is a distributed collection of data organized into named columns DataFrames can be constructed from wide array of data sources including HIVE tables Figure ーData exploration with Spark R Training Data PreparationData scientists will need to prepare training data to support supervised and unsupervised model training Data is formatted transformed and enriched for the modeling purpose As only the relevant data variable should be included in the model training feature selection is often performed to remove unneeded and irrelevant attributes that do not contribute to the accuracy of the predictive model Amazon ML provides feature transformation and feature selection capability that simplifies this process Labeled training datasets can be stored in Amazon S for easy access by machine learning services and frameworks Interactive Model TrainingTo generate and select the right models for the target business use cases data scientists must perform interactive model training against the training data Table provides a list of use cases with potential products that can you can use to create your solution followed by several example architectures for interactive model training Table ーMachine learning options on AWSM amp E Use CaseML AlgorithmsML SoftwareAWS ServicesSegmentationClustering e g k Means Spark ML Mahout REMRRecommendationCollaborative Filtering e g Alternating Least Square Spark ML Apache MahoutEMRNeural NetworkMXNetAmazon EC GPUCustomer ChurnClassification e g Logistic Regression Managed ServiceAmazon Machine LearningSpark ML Apache Mahout REMRSentiment AnalysisClassification e g Logistic Regression Managed ServiceAmazon Machine LearningClassification e g Support Vector Machines NaïveBayes Spark ML Mahout REMRNeural NetworkMXNet Caffe Tensorflow TorchTheanoAmazon EC GPU Amazon ML ArchitectureAmazon ML is a fully managed machine learning service that provides the quickest way to get started with model training Amazon ML can support long tail use cases such as churn and sentiment analysis where logistic regression for classification or linear regression for the prediction of a numeric value algorithms can be applied The following are the main steps of model training using Amazon ML Data source creation ーLabel training data is loaded directly from the Amazon S bucket where the data is stored A target column indicating the prediction field must be selected as part the data source creation Feature processing ーCertain variables can be transformed to improve the predictive power of the model ML model generation ーAfter the data source is created it can be used to train the machine learning model Amazon ML automatically splits the labeled training set into a training set and an evaluation set Depending on the selected target column Amazon ML automatically picks one of three algorithms binary logistic regression multinomial logistic regression or linear regression for the training Performance evaluation ーAmazon ML provides model evaluation features for model performance assessment and allows for adjustment to the error tolerance threshold All trained models are stored and managed directly within the Amazon ML service and can be used for both batch and real time prediction Spark ML Spark MLlib on Amazon EMR ArchitectureFor the use cases that require other machine learning algorithms such as clustering for segmentation and collaborative filtering for recommendation Amazon EMR provides cluster management support for running Spark ML To use Spark ML and Spark MLlib for interactive data modeling data scientists have two choices They can use Spark shell by SSH ing onto the master node of the EMR cluster or use data science notebook Zeppelin running on the EMR cluster master node Spark ML or Spark MLlib supports a range of machine learning algorithms for classification regression collaborative filtering clustering decomposition and optimization Another key benefit of Spark is that the same engine can perform data extraction model training and interactive query A data scientist will need to programmatically train the model using languages such as Java Python or Scala Spark ML provides a set of APIs for creating and tuning machine learning pipelines The following are the main concepts to understand for pipelines DataFrame ーSpark ML uses a DataFrame from Spark SQL as an ML dataset For example a DataFrame can have different columns corresponding to different columns in the training dataset that is stored in Amazon S Transformer ーAn algorithm that can transform one DataFrame into another DataFrame For instance an ML model is a Transformer that transforms a DataFrame with features into a DataFrame with predictions Estimator ーAn algorithm that can fit on a DataFrame to produce a transformer Parameter ーAll transformers and estimators share a common API for specifying parameters Pipeline ーChains multiple Transformers and Estimators to specify an ML workflow Spark ML provides two approaches for model selection cross validation and validation split With cross validation the dataset is split into multiple folds that are used as separate training and test datasets Two thirds of each fold are used for training and one third of each fold is used for testing This approach is a well established method for choosing parameters and is more statistically sound than heuristic tuning by hand However it can be very expensive as it cross validates over a grid of parameters With validation split the dataset is split into a training asset and a test data asset This approach is less expensive but when the training data is not sufficiently large it won t produce results that are as reliable as using cross validation Spark ML supports a method to export models in the Predictive Model Markup Language PMML format The trained model can be exported and persisted into an Amazon S bucket using the model save function The saved models can then be deployed into other environments and loaded for generating prediction Machine Learning on EC GPU EMR ArchitecturesFor use cases that require different machine learning frameworks that are not supported by Amazon ML or Amazon EMR these frameworks can be installed and run on EC fleets An AMI is available with preinstalled machine learning packages including MXNet CNTK Caffe Tensorflow Theano and Torch Additional machine learning packages can be added easily to EC instances Other machine learning frameworks can also be installed on Amazon EMR via bootstrap actions to take advantage of the EMR cluster management Examples include Vowpal Wabbit Skytree and HO Prediction Processing and ServingOne architecture pattern for serving predictions quickly using both historic and new data is the lambda architecture The components for this architecture include a batch layer speed layer and serving layer all working together to enable up to date predictions as new data flows into the system Despite its name this pattern is not related to the AWS Lambda service Figure ーLambda architecture componentsThe following is a brief description for each portion of the pattern shown in Figure Event data ーEvent level data is typically log data based on user activity This could be data captured on websites mobile devices or social media activities Amazon Mobile Analytics provides an easy way to capture user activity for mobile devices The Amazon Kinesis Agent makes it easy to ingest log data such as web logs Also the Amazon Kinesis Producer Library KPL makes it easy to programmatically ingest data into a stream Streaming ーThe streaming layer ingests data as it flows into the system A popular choice for processing streams is Amazon Kinesis Streams because it is a managed service that minimizes administration and maintenance Amazon Kinesis Firehose can be used as a stream that stores all the records to a data lake such as an Amazon S bucket Data lake ーThe data lake is the storage layer for big data associated with event level data generated by M amp E users The popular choice in AWS is Amazon S for highly durable and scalable data Speed layer ーThe speed layer continually updates predictive results as new data arrives This layer processes less data than the batch layer so the results may not be as accurate as the batch layer However the results are more readily available This layer can be implemented in Amazon EMR using Spark Streaming Batch layer ーThe batch layer processes machine learning models using the full set of event level data available This processing can take longer but can produce higher fidelity predictions This layer can be implemented using Spark ML in Amazon EMR Serving layer ーThe serving layer responds to predictions on an ongoing basis This layer arbitrates between the results generated by the batch and speed layers One way to accomplish this is by storing predictive results in a NoSQL database such as DynamoDB With this approach predictions are stored on an ongoing basis by both the batch and speed layers as they are processed Hope this guide gives you an Introduction to Predictive Analytics Architecture on AWS Let me know your thoughts in the comment section And if you haven t yet make sure to follow me on below handles connect with me on LinkedInconnect with me on Twitterfollow me on github️Do Checkout my blogs Like share and follow me for more content ltag user id follow action button background color important color fac important border color important Adit ModiFollow Cloud Engineer AWS Community Builder x AWS Certified x Azure Certified Author of Cloud Tech DailyDevOps amp BigDataJournal DEV moderator Reference Guide |
2022-02-16 14:38:54 |
海外TECH |
DEV Community |
🎬Random Password Generator | Html CSS Javascript✨ |
https://dev.to/robsonmuniz16/random-password-generator-html-css-javascript-2k3h
|
Random Password Generator Html CSS JavascriptMake a Random Password Generator using Html CSS Javascript step by step from SCRATCH… Source Code HTML lt DOCTYPE html gt lt html lang en gt lt head gt lt meta charset UTF gt lt title gt Random Password Generator JavaScript lt title gt lt link rel stylesheet href style css gt lt head gt lt body gt lt div class inputBox gt lt h gt Random lt span gt Password Generator lt span gt App lt h gt lt input type text name placeholder Create Password id password readonly gt lt button id btn onclick getPassword gt Generate Password lt button gt lt div gt lt script src app js gt lt script gt lt body gt lt html gt CSS margin padding font family Consolas sans serif user select none body min height vh display flex justify content center align items center background color faedf inputBox position relative width px inputBox h font size px color span color ed text shadow px px placeholder color fcac inputBox input position relative width height px border none margin px px background transparent show the ugly outline outline none padding px font size px letter spacing px box sizing border box border radius px color box shadow px px px rgba inset px px px rgba inset px px px rgba px px px rgba inputBox input placeholder letter spacing button position relative cursor pointer color faedf background color font size px display inline block padding px px border radius px inputBox btn active background color transform scale Follow me on |
2022-02-16 14:35:50 |
海外TECH |
DEV Community |
Zen Cart Integration Development in 2022 |
https://dev.to/khrystyna_oliinyk_97b06d1/zen-cart-integration-development-in-2022-3o9g
|
Zen Cart Integration Development in As eCommerce continues to grow BB software vendors will be unable to ignore the potential of integrating their applications with existing eCommerce platforms If you run an eCommerce software it s important to look at Zen Cart integration as it can bring you many benefits In this article we ll look at various ways you can take advantage of Zen Cart integration and a simple way to develop an integration with this shopping platform What is Zen Cart Integration Zen Cart integration is the process of establishing an automated connection between eCommerce software and Zen Cart platform Such integration allows to access the data like orders products customers etc from Zen Cart stores Features of Zen Cart APIZen Cart API allows developers to connect with its data and retrieve it according to their requirements Once developers or software vendors have integrated their applications with the Zen Cart platform they can access data from clients online stores This makes it possible for them to develop customized applications for many different businesses With the help of API this data can be transferred to your software from where your clients can manage it according to their needs Those clients can also have a detailed view of their data from a single dashboard Benefits of Developing Zen Cart IntegrationIntegrating with Zen Cart is a must for BB software vendors and developers who want to scale their solutions Here are five reasons why More than websites are built on this platform Thus connecting with Zen Cart will give you access to a massive pool of potential clients Zen Cart attracts customers from all over the world including the USA Germany France and Italy Connection to this platform allows you to grow your business internationally and expand your clientele When you integrate with Zen Cart you will get access to all your customers data like orders products categories and other important information This data is useful for your eCommerce software because it cannot perform its core functions without it Zen Cart integration will help your company scale while improving your sales and revenue Integrating with Zen Cart gives you a competitive advantage over other vendors selling similar products How to Easily Integrate with Zen Cart There s always an option to create an in house integration but that s not feasible because it will take up a lot of your time and money If you want to connect your website with Zen Cart and other eCommerce platforms at once try APICart It allows you to seamlessly integrate with popular shopping platforms and marketplaces in one go It constantly updates the integration with eCommerce platforms when new cart versions appear As for in house integration development with shopping platforms integration maintenance and upgrades would have taken just as much time money and resources as building the new integrations APICart provides API methods for working with orders products shipments customers and other store data As a BB software vendor you need to look for integrations that help your business grow Zen Cart integration is one of the best possibilities for you to increase your profits |
2022-02-16 14:32:21 |
海外TECH |
DEV Community |
Path Sum(code and Explanation) |
https://dev.to/riyu/path-sumcode-and-explanation-5fa
|
Path Sum code and Explanation Problem StatementQ Given the root of a binary tree and an integer targetSum return all root to leaf paths where the sum of the node values in the path equals targetSum Binary treeInput root null null null targetSum Output Explanation There are two paths whose sum equals targetSum IntuitionLets say you know this question requires you to use DFS but how are you going to store the individual values of all the node and sum them to find if they are equal to targetSum For a complete beginner it may not come handy unless you have practiced a lot of such questions Now in the iterative version of DFS you know that you have to use stack to remember visited nodes and traverse further So you are aware that stack is used to store the nodes So instead of storing only the nodes in the stack you can also store a tuple inside the stack along with the node s sum of all the previous node value Something like thisstackThis little trick is hard to come up with your own but once you know it you can solve many questions regarding the DFS of Binary Tree i e now you know that you can use the stack itself to store more data about the binary tree SOLUTION def pathSum root if not root return None stack root root val root val ans while stack node val li stack pop if not node left and not node right and val targetSum ans append li if node right stack append node right val node right val li node right val if node left stack append node left val node left val li node left val return ansThis trick of storing using tuples in stack will help you solve a lot more questions |
2022-02-16 14:31:37 |
海外TECH |
DEV Community |
Benefits of using Strapi with Typescript + Storybook tandem |
https://dev.to/klaudiaj/benefits-of-using-strapi-with-typescript-storybook-tandem-ccm
|
Benefits of using Strapi with Typescript Storybook tandemWe are working on react components integrated with strapi and storybook Both for me a novice programmer and for Wojtek a programmer with many years of experience and extensive knowledge it brings many benefits Starting with strapi we can determine the content type decide what fields our components will need e g whether a given component will contain a title description photo and whether for example it must meet a condition to be displayed In strapi we can manage the content that we want to include in a given component We can also easily change it so that a non programmer can edit the content All data that we input into strapi can be obtained using GraphQL API or REST API On top of that with the help of a graphql codegen tool we can make the graphql response typed in typescript Typescript shows us what data and in what form component expects to receive Typescript is also responsible for maintaining contract between strapi responses and components props By passing these props to the components we can display them by creating a story in the storybook The storybook shows what a given component will look like and allows you to create different variants of component We can create stories for different themes multiple language versions and for example show negative scenarios for when user forgot to input some data or we have had an backend issue showcasing display of appropriate error message and gracefully handling those scenarios as well This combination of strapi sb ts allows a front end developer to work without being strictly dependent on the backend As long as the initial contract is maintained But also using Strapi by itself which provides most of the CRUD operations out of the box limits the amount of custom backend code that needs to be written significantly which in turn speeds up the development process and amount of bugs that can be introduced However it brings the most benefits for the client who can manage the content of his application in strapi without the help of a developercheck how the components will look like as well as all their variants in the storybook while the application is still being worked onstrapi is free and open source CMS which is constantly being improved and enhanced by the community making it a choice that in the future may support even more features |
2022-02-16 14:31:08 |
海外TECH |
DEV Community |
5 formas de eliminar elementos de un arreglo con Javascript |
https://dev.to/matiasfha/5-formas-de-eliminar-elementos-de-un-arreglo-con-javascript-1cha
|
formas de eliminar elementos de un arreglo con JavascriptPhoto by Devin Avery on Unsplash TLDRLección en video en eggheadJavascript es un lenguaje muy flexible que ofrece múltiples formas de solucionar un problema Por ejemplo Eliminar elementos de un arreglo Tienes métodos que mutan el arreglo y métodos inmutables revisemos algunosDentro de los métodos mutables puedes elegir Array pop Array shift y el operador delete En el caso de los métodos inmutables tienes Array slice y Array filter Array popTe permite remover el último elemento de un arreglo cambiando el tamaño del arreglo original El elemento que se remueve es retornado a menos que no queden elementos en el arreglo en ese caso obtienes undefined const elementos const last elementos pop console log last console log elementos Array shiftEste es el método opuesto a Array pop permitiéndote remover el primer elemento de un arreglo retornándolo para su uso posterior Cambia el arreglo original pues extrae el elemento const elementos const first elementos shift console log first console log elementos Operador deleteEste es en realidad un operador que te permite remover remover una propiedad de un objeto Al eliminar un elemento del arreglo el tamaño length del arreglo no es afectado Puedes ver un ejemplo en este playgroundconst elementos console log elementos elementos length delete elementos console log elementos elementos length Array sliceEste método retorna una copia de una porción del arreglo determinada por los parámetros usados en slice start end sin modificar el arreglo original Puedes revisar un demo aquiconst elementos Obten una parte del arreglo desde el indice al dejando fuera el indice const piece elementos slice console log piece Obten otra parte del arreglo desde el indice al const piece elementos slice console log piece une las pieces en un nuevo arreglo usando el operador spreadconst newElementos piece piece console log newElementos const elementos elementos slice elementos slice Más dinámicolet indiceAEliminar const elementos elementos slice indiceAEliminar elementos slice indiceAEliminar elementos lenght console log elementos Array filterUna de las formas más directas de remover elementos de un arreglo es utilizar Array filterArray filter es un método inmutable que retorna un nuevo arreglo con los elementos que cumplan la condición implementada por la función utilizada como argumento De forma interna filter itera sobre los elementos del arreglo y aplica la función argumento en cada item retornando un valor boolean s i el elemento pasa la condición se retorna true indicando que este seráagregado al nuevo arreglo Es un método ideal para remover elementos de un arreglo de objetos Puedes ver un demo en este enlaceconst elementos id name Matias id name Juan const filtrados elementos filter item gt item name Matias console log filtrados En este caso usas la condición item name Matias para definir que se queda en el nuevo arreglo y que no ConclusiónEn resumen las opciones para eliminar elementos de un arreglo son variadas y dependen siempre del caso de uso tienes opciones que modifican el arreglo original como pop y shift y opciones que crean un nuevo arreglo como slice y filter |
2022-02-16 14:26:15 |
海外TECH |
DEV Community |
JavaScript Basics #7: Handling Events |
https://dev.to/ericnanhu/javascript-basics-7-handling-events-4if9
|
JavaScript Basics Handling EventsYou can download the source code for this tutorial here Download the Source CodeIn computer programming an event is a user input such as mouse and keyboard actions and the program we write is usually expected to respond with something This process is called event handling Event HandlersLet s first take a look at a very simple example We have an HTML document with a paragraph and we want the page to return a message when it is clicked lt p gt Click this document to activate the handler lt p gt lt script gt Recall that the gt syntax is how we define an arrow function in JavaScript window addEventListener click gt console log You knocked lt script gt This time the output message will only appear in the console when you click on the document instead of the moment the page is loaded Register Event HandlersThe addEventListener method is how we can register an event handler for the document node In fact we can use the same method to register event handlers for any node in the HTML document For example lt This time we register a event handler for the button but not the paragraph gt lt button gt Click me lt button gt lt p gt No handler here lt p gt lt script gt let button document querySelector button button addEventListener click gt console log Button clicked lt script gt Actually there is an onclick attribute for the HTML nodes which will have the exact same effect However you can only register one handler for each node By using the addEventListener method we are able to register multiple handlers for each node lt button gt Click me lt button gt lt script gt let button document querySelector button When you click the button the console outputs Button clicked button addEventListener click gt console log Button clicked When you click the button the console outputs Button double clicked button addEventListener dblclick gt console log Button double clicked lt script gt The removeEventListener method call with similar arguments can be used to remove an already registered event handler lt button gt Act once button lt button gt lt script gt let button document querySelector button function once console log Done button removeEventListener click once button addEventListener click once lt script gt This button will only work once after the removeEventListener click once method is executed the event handler registered for the button will be removed The function that is passed to the removeEventListener has to be the same one that you passed to the addEventListener method PropagationFor most event types the event handler registered for the node with children can receive events that happened in the children For example if a button inside a paragraph is clicked the event handler registered for the paragraph will also be able to see that click event The event is said to propagate outward For example if both the button and the paragraph have an event handler then the handler registered for the button will go first then the paragraph and it will keep propagating outward until it reaches the root of the document This feature can be quite useful sometimes however it is not always what we want Luckily we can stop the propagation using the stopPropagation method lt lt button gt is the child of lt p gt gt lt p gt A paragraph with a lt button gt button lt button gt lt p gt lt script gt let para document querySelector p let button document querySelector button para addEventListener mousedown gt console log Handler for paragraph button addEventListener mousedown event gt console log Handler for button If the button is clicked with the right mouse button there will be no propagation if event button event stopPropagation lt script gt Sometimes we want to register event handlers for multiple elements on the page To do this we can use the target attribute to cast a wide net for a type of event lt button gt A lt button gt lt button gt B lt button gt lt button gt C lt button gt lt script gt document body addEventListener click event gt if event target nodeName BUTTON console log Clicked event target textContent lt script gt Default ActionsA lot of the events have a default action for example when you click on a link you will be taken to the link s target if you press the down arrow the browser will scroll the page down You can prevent that default action from being activated by using the preventDefault method Let s try something completely useless but very interesting lt a href gt MDN lt a gt lt script gt let link document querySelector a When you click the link instead of going to the URL that link specifies the console will just output Nope link addEventListener click event gt console log Nope event preventDefault lt script gt Even though this is possible do not do this unless you have a very good reason to Or it will be very confusing for the users Key EventsNow we have discussed how event handlers work in general it s time to take a closer look at all the different types of events The first one we are going to talk about is the key event When a key on your keyboard is pressed it will trigger a keydown event and when it is released it triggers a keyup event lt p gt This page turns violet when you hold the V key lt p gt lt script gt window addEventListener keydown event gt if event key v document body style background violet window addEventListener keyup event gt if event key v document body style background lt script gt Looks very simple however you do need to be very careful about the keydown event It is not a one time thing instead it will keep being triggered over and over again for as long as the key is being pressed until it is released You can experiment with the previous code see what happens when you keep the key pressed There are also some special keys like CTRL ALT and SHIFT These are called modifier keys they modify the original value of other keys by forming a key combination For instance when you press a key while holding the SHIFT key s will become S will become etc We can register event handlers for key combinations like this lt p gt Press Control Space to continue lt p gt lt script gt window addEventListener keydown event gt if event key amp amp event ctrlKey console log Continuing lt script gt Pointer EventsPointer as the name suggests is used to point at things on the screen There are primarily two ways that you can use to do that either with a mouse or a touch screen They produce different types of events Mouse ClicksMouse clicks work similarly to key events When you press a mouse button a mousedown event is triggered and when you release that button a mouseup event is triggered And after the mouseup event a complete click is finished so a click event will be fired lt button gt Click me lt button gt lt script gt let button document querySelector button button addEventListener mousedown event gt console log mouse down button addEventListener mouseup event gt console log mouse up button addEventListener click event gt console log button clicked lt script gt When two clicks happen very close together a dblclick double click event will be triggered after the second click lt button gt Double click me lt button gt lt script gt let button document querySelector button button addEventListener dblclick event gt console log double clicked lt script gt Mouse MotionWhen a mouse pointer moves a mousemove event is triggered lt p gt Move the cursor onto this paragraph to turn it red lt p gt lt script gt let para document querySelector p para addEventListener mousemove event gt para style color red lt script gt This can be very useful when you are trying to implement some sort of drag and drop functionality But to do that we need to first track the location of the cursor To get that information we can either use the event s clientX and clientY properties which contains the event s coordinates in pixels relative to the top left corner of the window or pageX and pageY which are relative to the top left corner of the whole document For example the following script will output the coordinates of the click events that happened on the page lt p gt click anywhere lt p gt lt script gt window addEventListener click event gt console log X event clientX console log Y event clientY lt script gt Here is a more complicated example this program will display a bar and you can drag it to change its width lt p gt Drag the bar to change its width lt p gt lt div style background orange width px height px gt lt div gt lt script gt let lastX Tracks the last observed mouse X position let bar document querySelector div bar addEventListener mousedown event gt if event button if the left button is being held lastX event clientX If the cursor moves while the left button is being held window addEventListener mousemove moved event preventDefault Prevent selection function moved event If no button is being held remove the mousemove event handler if event buttons Notice this is buttons not button window removeEventListener mousemove moved else let dist event clientX lastX let newWidth Math max bar offsetWidth dist bar style width newWidth px lastX event clientX lt script gt Notice that we used two different ways to access which button is pushed The button property and the buttons property and they clearly work differently Their main difference is that the button property can only tell you which button singular is clicked while the buttons property can tell you if a combination of buttons is pushed The button property Main button pressed usually the left button or the un initialized state Auxiliary button pressed usually the wheel button or the middle button if present Secondary button pressed usually the right button Fourth button typically the Browser Back button Fifth button typically the Browser Forward buttonThe buttons property No button or un initialized Primary button usually the left button Secondary button usually the right button Auxiliary button usually the mouse wheel button or middle button th button typically the Browser Back button th button typically the Browser Forward button When more than one button is pressed simultaneously the values are combined For example when the primary and secondary buttons are pressed at the same time the value will be Touch EventsIn most cases the mouse events will also work when the user is using a touch screen For example when you are tapping a button on your screen it will trigger a click event it will be the same as clicking it with a mouse pointer However this won t work in some cases such as the resizing bar example we talked about before Because the touch screen doesn t have multiple buttons and it can t track your finger s position when you are not touching the screen So to solve this problem we have a few specific event types triggered only by touch interaction When your finger touches the screen it triggers a touchstart event when it moves while touching it triggers a touchmove event and finally when you lift your finger it triggers a touchend event Scroll EventsA scroll event is triggered when you place the cursor on an element and scroll the middle button of your mouse This can be very useful when you are trying to make your webpage more responsive For example when you go to the product showcasing page on Apple s website notice that the elements on the page will move as you scroll down Here is an example of a progress bar it starts at and will go to as you scroll down lt style gt progress border bottom px solid orange width position fixed top left lt style gt lt div id progress gt lt div gt lt script gt Create some content document body appendChild document createTextNode supercalifragilisticexpialidocious repeat let bar document querySelector progress window addEventListener scroll gt let max document body scrollHeight innerHeight bar style width pageYOffset max lt script gt Focus EventsWhen an element gains focus a focus event will be triggered and when the element loses focus a blur event will be triggered Unlike the other event types we ve discussed these two do not propagate This is most commonly used on HTML field elements When you click on a text field and start typing some texts that field is said to be in focus and when you move on from that field and click on other elements that field element loses focus This is an example that displays help texts for the text field that is currently in focus lt p gt Name lt input type text data help Your full name gt lt p gt lt p gt Age lt input type text data help Your age in years gt lt p gt lt p id help gt lt p gt lt script gt let help document querySelector help let fields document querySelectorAll input for let field of Array from fields field addEventListener focus event gt let text event target getAttribute data help help textContent text field addEventListener blur event gt help textContent lt script gt Load EventsThe load event is triggered when the entire page finishes loading This is different from directly putting the code inside the lt script gt tag directly without event handlers The code inside the lt script gt tag is run immediately when the tag is encountered This might be too soon in some cases There is also a similar event type called beforeunload It is triggered when you close a page the primary use of this event is to prevent the user from accidentally closing their unsaved work |
2022-02-16 14:21:36 |
海外TECH |
DEV Community |
Paracetamol.js💊| #56: Explica este código JavaScript |
https://dev.to/duxtech/paracetamoljs-56-explica-este-codigo-javascript-2od3
|
Paracetamol js Explica este código JavaScript Explica este código JavaScriptconst one false null const two null false const three true console log one two three A false null B null true C D null null trueRespuesta en el primer comentario |
2022-02-16 14:20:17 |
海外TECH |
DEV Community |
I can't stand another meeting! |
https://dev.to/aliceborner/i-cant-stand-another-meeting-n6i
|
I can x t stand another meeting Looking at ourselves for more than years now almost everyday for some people even almost the whole day on a screen is not easy and can be incredible fatiguing Zoom or any other meetings software became basically our only way to communicate with people at work and was maybe soon this will change one of the single alternatives that would be more similar to an in person experience As by chat mail most times it s hard to communicate our message without being misinterpreted or always with this more seriousness load that at least for me an email brings Therefore this phenomenon appeared called Zoom fatigue and it s related to tiredness or even burnout associated with overuse of this type of virtual platforms Have you ever felt that I did in a very light way and what I can share with you from my researches to maybe suggest in your companies or try out with your teams in case you are also feeling it are these few tips Try to keep meetings brief You can even start small by just reducing min from those regular calls you have Avoid back to back calls Having the smallest break in between calls to stretch your legs grab a water go to the toilet or maybe just look at the window giving your eyes a break can make a huge difference Having a meetings day In a meetings day you try to book all your meetings in one day and leaving the others free to do some active work Having focus time blockersThis way people cannot schedule meetings during the times you feel more productive in your day Another thing is to keep meetings inside working hours you and your team can define that meetings can only happen from am pm for example to avoid that it runs longer than your usual working hours Last but not least I would like to mention that we are learning how to work in this new setup and new tools are appearing to support us I learned recently about this tool called Bubbles I got interested after watching a video about it not necessarily the tool itself because I could not find much about it including security aspects but the whole idea of still having a more in person touch on things with videos and audios without having to have meetings all the time I hope these help you and share with us if you have others |
2022-02-16 14:16:20 |
海外TECH |
DEV Community |
Injecting backdoors to NPM packages |
https://dev.to/kozlovzxc/injecting-backdoors-to-npm-packages-a0k
|
Injecting backdoors to NPM packages️️️I m not advising anyone to actually backdoor any open source packages it s actually the opposite let s make a world a better place In short words when installing dependencies your package manager looks first into lock files like yarn lock There it can find package name exact package version link to the sources and integrity checks which helps to identify if package wasn t corrupted or altered on the way is number version resolved bdfcdcafb integrity sha CifkgeTylSpdtTpeLVMqvSBEVzTttHvERD pnZANvMRLQKPDlKcGvNpNZWZUBlbGXYxxng The issue is that someone can update this lock file and put a new link which is pointing to a backdoored package version Let s try to replicate this attack and see how hard is it Installing packageAs an example we will try to modify is number package There is nothing special about this package it s just small so it will be easy to modify it Let s install it and check if it works at all yarn add is numberindex jsconst isNumber require is number console log isNumber ➜malicious lockfile git master ✗node index jstrueyarn lock THIS IS AN AUTOGENERATED FILE DO NOT EDIT THIS FILE DIRECTLY yarn lockfile vis number version resolved bdfcdcafb integrity sha CifkgeTylSpdtTpeLVMqvSBEVzTttHvERD pnZANvMRLQKPDlKcGvNpNZWZUBlbGXYxxng Everything is legit for now Copying packageAs you may know or noticed in lock file before packages are served as tgz files It s not hard to build one yourself just use the built in npm command npm pack mkdir assets tmp folder which we will serve locallycp r node modules is number assets copy sourcescd assets is number go to copied sources foldernpm pack build tgz fileOutput ➜is number git master ✗npm packnpm noticenpm notice is number npm notice Tarball Contents npm notice kB LICENSEnpm notice kB README mdnpm notice B index jsnpm notice kB package jsonnpm notice Tarball Details npm notice name is numbernpm notice version npm notice filename is number tgznpm notice package size kBnpm notice unpacked size kBnpm notice shasum adefacaefacdadcabcccnpm notice integrity sha U Io Bh sk iHyXJG svOLIg npm notice total files npm noticeis number tgzThat s basically it you need only this steps to replicate a package Alter sourcesCurrent index js version is super simple is number lt Copyright c present Jon Schlinkert Released under the MIT License use strict module exports function num if typeof num number return num num if typeof num string amp amp num trim return Number isFinite Number isFinite num isFinite num return false Let s not do anything bad but just print Hello world is number lt Copyright c present Jon Schlinkert Released under the MIT License use strict module exports function num NEW LINE console log Hello world NEW LINE if typeof num number return num num if typeof num string amp amp num trim return Number isFinite Number isFinite num isFinite num return false Now let s just pack it again but we need to print integrity number which we will need later we can do it with json option ➜is number git master ✗npm pack json id is number name is number version size unpackedSize shasum dadddcffdacbfddaadb integrity sha VFNyAhugXJ lnZGGIPNLValf WoijnfhZvIGBU ytqDv GwusnbSMvswTTjctHVI vBeRVIoo Cw filename is number tgz files path LICENSE size mode path README md size mode path index js size mode path package json size mode entryCount bundled Serve this packageFor this experiment we won t even publish it to npm or anywhere else we can just serve this file locally with http server This file will be accessible locally via is number tgz Altering lock fileThe final preparation step is to alter lock file it won t be hard since we know shasum and integrity number from the step before yarn lock before THIS IS AN AUTOGENERATED FILE DO NOT EDIT THIS FILE DIRECTLY yarn lockfile vis number version resolved bdfcdcafb integrity sha CifkgeTylSpdtTpeLVMqvSBEVzTttHvERD pnZANvMRLQKPDlKcGvNpNZWZUBlbGXYxxng yarn lock after THIS IS AN AUTOGENERATED FILE DO NOT EDIT THIS FILE DIRECTLY yarn lockfile vis number version resolved is number tgz dadddcffdacbfddaadb integrity sha VFNyAhugXJ lnZGGIPNLValf WoijnfhZvIGBU ytqDv GwusnbSMvswTTjctHVI vBeRVIoo Cw Check if it worksWe need to clean node modules first also we will need to clear yarn cache because otherwise it will install official version which it cached before when we installed it first time ➜malicious lockfile git master ✗rm rf node modules➜malicious lockfile git master ✗yarn cache clean➜malicious lockfile git master ✗yarn verboseyarn install v EDITED verbose current time T Z Resolving packages Fetching packages verbose Performing GET request to is number tgz Linking dependencies verbose Creating directory EDITED verbose Copying EDITED to EDITED EDITED Building fresh packages Done in s As we may see in verbose version we fetched local package version so let s run it ➜malicious lockfile git master ✗node index jsHello world true Why is it matter Someone may think already Why should I care You ve updated local dependency and hacked yourself nice job bro The issue is that it s not that simple if we take a look on how lock file updates usually look like in open source we will see that they are hidden from a reviewer in most cases Btw be honest right now how many times before did you look into changes in lock file personally So it won t be an easy task to spot one URL change in this blob of changes What if we even upload is nomber to the npm package json will still say that we re using normal is number but we will install is nomber Good luck spotting one letter mismatch in changed lines Even if NPM will start taking down misspelled packages like is nomber we still can register yranpkg com and mimic the exact path to the package there Good luck spotting one letter url change in changed lines Final notesYou need to be extra careful about strangers who update dependencies in your open source project It may look like a first open source commitment from a student but it also may be an attempt to backdoor everything from amateur black hat Maybe you should even only allow updating lockfiles and installing new packages to proven contributors but it s not a percent proven solution read this An additional approach may be to use lockfile lint but you shouldn t just rely on this script entirely because there are other ecosystems than npm and they may have similar issues ReferencesBasically this article is a follow up to Why npm lockfiles can be a security blindspot for injecting malicious modules Another related read would be A post mortem of the malicious event stream backdoorIf you enjoyed these articles take a look on these two Hope you had fun Btw let s be friends here and on twitter |
2022-02-16 14:15:06 |
海外TECH |
DEV Community |
Make your browser talk! |
https://dev.to/wimdenherder/make-your-browser-talk-2f9l
|
Make your browser talk This is so cool you can let your browser talk just with the latest javascript in the browser It s called SpeechSynthesis Open your javascript console cmd opt j in chrome on mac and try this let utterance new SpeechSynthesisUtterance Hello speechSynthesis speak utterance On my computer I heard the words Hello world with a Dutch accent So let s change the nationality of the voice Let s first load this in our global memory const synth window speechSynthesis Then search for voices synth getVoices The browser returns voice objects Let s map it to the languageCode key lang let languageCodes synth getVoices map voice gt voice lang Let s only look at the unique codes with languageCodes new Set languageCodes results I bet your mothertongue is also among those Let s find yours in my case nl NL which is Netherlands synth getVoices find voice gt voice lang nl NL The find method returns the first hit In my case a human bot called Xander not a typical Dutch name Let s make this voice say something if you didn t yet load the speech synthesis in the constant synth you may do so here then uncomment the next line const synth window speechSynthesis const utterance new SpeechSynthesisUtterance Hallo Dutch utterance voice synth getVoices find voice gt voice lang nl NL synth speak utterance It would be nice to make a function that has text and language as input and let the voice speak it function speak text language const synth window speechSynthesis const utterance new SpeechSynthesisUtterance text utterance voice synth getVoices find voice gt voice lang language synth speak utterance Now we can simply use that function and wirite speak hi there en UK Enjoy |
2022-02-16 14:14:16 |
Apple |
AppleInsider - Frontpage News |
Daily deals Feb. 16: $200 off Microsoft Surface Pro, 40% off Spigen magnetic battery pack, refurbished Intel Macs, more! |
https://appleinsider.com/articles/22/02/16/daily-deals-feb-16-200-off-microsoft-surface-pro-40-off-spigen-magnetic-battery-pack-refurbished-intel-macs-more?utm_medium=rss
|
Daily deals Feb off Microsoft Surface Pro off Spigen magnetic battery pack refurbished Intel Macs more Wednesday s best deals include off Netgear Nighthawk WiFi router a refurbished Intel Mac sale the Logitech Crayon for and an M TB SSD with USB C enclosure for total Best deals February As we do every day we ve collected some of the best deals we could find on Apple products tech accessories and other items for the AppleInsider audience If an item is out of stock it may still be able to be ordered for delivery at a later date Read more |
2022-02-16 14:59:03 |
Apple |
AppleInsider - Frontpage News |
'Pokemon Trading Card Game Live' launching in beta on Feb. 22 |
https://appleinsider.com/articles/22/02/16/pokemon-trading-card-game-live-launching-in-beta-on-feb-22?utm_medium=rss
|
x Pokemon Trading Card Game Live x launching in beta on Feb The Pokemon Company has announced that a limited beta of Pokemon Trading Card Game Live will launch on iOS macOS and other platforms later in February ahead of an official debut Pokemon TCG Live Pokemon TCG Live was first announced back in September but a release was delayed until The game itself is a refreshed version of Pokemon TCG and includes regular content updates new card sets and an iPhone app Read more |
2022-02-16 14:44:58 |
Apple |
AppleInsider - Frontpage News |
How to use Conversation Boost with AirPods Pro |
https://appleinsider.com/articles/21/10/06/how-to-use-conversation-boost-with-airpods-pro?utm_medium=rss
|
How to use Conversation Boost with AirPods ProApple s latest hearing technology is now available on AirPods Pro and it s easy to use ーbut oddly fiddly to set up Conversation Boost helps you hear people talking to youThis could be simpler Apple is brilliant with accessibility features but often setting them up requires a lot of steps and Conversation Boost certainly does Read more |
2022-02-16 14:39:00 |
海外TECH |
Engadget |
Alienware x14 review: A portable gaming laptop that doesn't suck |
https://www.engadget.com/alienware-x-14-review-a-portable-gaming-laptop-that-doesnt-suck-143013640.html?src=rss
|
Alienware x review A portable gaming laptop that doesn x t suckFor years Alienware eschewed thin and light gaming laptops opting instead to make slightly bulkier systems with more affordable pricing But all that changed last year with the introduction of its X series notebooks And now Alienware is pushing its quest for sleekness even further with the new x the company s thinnest and lightest gaming laptop yet To add even more rum to the punch the x is also one of the first gaming laptops available featuring Intel s latest th gen mobile CPUs And while the x isn t without its quirks the result is a machine that makes me wish Alienware had gotten into portable gaming rigs years ago DesignSporting Alienware s Legend design language the x is without a doubt a striking system though ultimately you ll need to decide how much you fancy its sci fi aesthetics What s not in question is the laptop s thinness which stands at just inches thick while weighing barely more than four pounds That s even thinner and almost a pound lighter than the x inches and pounds while making Alienware s more mainstream M R seem almost bloated inches and pounds Sam Rutherford EngadgetNow I m not normally the type to lust after a few ounces or tenths of an inch getting shaved off a device but on the x every little reduction matters That s because while most gaming laptops don t even come close to fitting in my everyday messenger bag that s not meant to stash anything larger than a inch ultraportable the x actually fits if just barely That means I m much more likely to bring this thing with me on trips which is kind of the whole point of a thin and light gaming notebook Don t get me wrong I appreciate beastly inch gaming rigs but when my back starts to hurt at the mere thought of carrying one around in practice those systems often function more like mobile desktops than any sort of travel friendly gaming machine Sam rutherford EngadgetThe main innovation on the x is Alienware s new dual torque which adds strength and stability to the laptop s display while once again reducing weight and thickness compared to previous X series machines And as you d expect from Alienware the x comes with customizable RGB lighting on its lid and keyboard That said compared to its larger siblings you do lose the extra RGB light ring that would normally outline the system s rear ports Fun fact That pill like shape is actually called a stadium Inside there s a lovely soft touch finish on x s wrist rest which may feel a bit cramped for people with larger hands Display and soundOn the x there s only one display option and it s a good one The Hz x screen is plenty sharp while support for NVIDIA s G Sync helps prevent screen tearing while gaming But the thing that impressed me most is the way colors pop At first I almost mistook the x s display for an OLED panel And while its black levels aren t quite deep enough for that thanks in part to support for Dolby Vision HDR colors look rich and vibrant regardless of whether you re gaming or watching a movie And with a tested brightness of just under nits the x s screen looks good in both dim and sun filled rooms though trying to game outside in direct sunlight is still a challenge Sam Rutherford EngadgetDolby tech is also available on the x s speakers thanks to support for Dolby Atmos which adds an extra dimension to audio through the use of extra height channels Unfortunately I felt like the x s audio sounded a bit distant despite its upward firing speakers being located right behind the laptop s keyboard And even though the x had no issues turning up the volume it s almost too much of a good thing because in certain situations you can hear the x s chassis rattle when the speakers are set above percent PerformanceWhile the x isn t quite as powerful as its larger siblings and doesn t have the space to accommodate beefier GPUs Alienware s thinnest gaming laptop still punches well above its weight I was able to easily hit fps on high settings in a number of AAA games like Halo Infinite and you can push things even higher if you don t mind fiddling with a game s graphics settings And for people more focused on getting a competitive advantage maxing out the x s Hz display is a cinch in titles like CS GO on lower settings which is what you d probably use anyway Sam Rutherford EngadgetIn Shadow of the Tomb Raider on the highest settings the x averaged frames per second with similar results in Far Cry of fps on Ultra And while the x posted a slightly lower average frame rate of fps in Metro Exodus on ultra lowering the game s texture settings a touch was more than enough to boost frame rates firmly back above fps Remarkably despite limited space inside for cooling Alienware s proprietary Element thermal paste and vapor chamber which only come on systems with RTX graphics did a good job of preventing throttling from becoming a major issue The downside is that the x s fans are quite aggressive often spinning up the instant you launch a game while producing a somewhat high pitched whine that you can t really escape unless you put on some headphones Thankfully Alienware s Command Center app supports a number of thermal profiles including a Quiet setting to help reduce fan noise though depending on the game that might cause your frame rate to dip a bit Keyboard touchpad and portsSam Rutherford EngadgetTrying to cram a full size keyboard with media controls on a inch laptop is always a bit of a challenge and while the x generally makes good use of space it ain t perfect The function keys are half sized and even the x s keycaps are a touch smaller than what you d get on Dell s non gaming systems like an XPS It s a similar situation for things like the Windows key the Function button and the Shift key all of which are smaller than normal And for those who use the Delete key a lot watch out because it s a little too close to the laptop s power button for my liking On the flip side I do appreciate the extra row of media control keys on the right which includes an always useful mic mute button In short I wouldn t go as far to say the x s keyboard is a dealbreaker it just requires more adjustment time than usual As for the touchpad at x inches it s definitely on the small side Though on gaming laptops having a less roomy touchpad is a bit more forgivable as the vast majority of gamers typically prefer to use an external mouse even when they re using the laptop s built in keyboard Sam Rutherford EngadgetMeanwhile when it comes to connectivity Alienware definitely didn t skimp on ports The x features three USB C connections two of which support Thunderbolt one USB Type A socket HDMI a combo audio jack and even a microSD card slot While I would have liked to see an Ethernet jack too my only real gripe with the x s ports is that they are located around back Putting all the ports in the rear of the system helps cut down on clutter but when you just want to quickly insert something like a thumb drive spinning the laptop around to do so feels clunky especially if you have any other peripherals plugged in Note Just don t expect much from the x s p webcam It s fine in a pinch but the fairly low resolution combined with mediocre image quality means you ll likely want to use an external camera if you plan to show your face while livestreaming Battery life and chargingSam Rutherford EngadgetThe x s battery life varies a ton depending on how you use it If you re just browsing the web or streaming video the x s battery life won t quite last through a full workday but it s more than serviceable On our local video rundown test the x lasted just short of eight hours The bigger issue is that if you have any dreams of gaming without plugging in you might want to squash those now I found that while playing Teamfight Tactics which isn t a demanding game the x conked out after about an hour and minutes Battery lifeAlienware x Hp Spectre x Surface Laptop Studio Hz Asus ROG Strix G That said I do want to credit Alienware for equipping the x with a watt USB C power cable instead of a proprietary charger like so many gaming laptops Because the x s power cable is USB C you can use it to charge other USB C devices like a phone or tablet potentially reducing the number of cords you need to carry around while traveling Alternatively you could use a universal USB PD charger instead though you ll want to make sure that charger has the required power output and an appropriate cable to properly juice up the x as many of Dell s systems can be picky about USB C charging if you re using old or out of spec accessories ConfigurationsThe x starts at for an Intel Core i CPU GB of RAM GB of NVMe storage and an NVIDIA RTX GPU with fully loaded systems like our review unit topping out at around with GB of RAM TB of storage and an NVIDIA RTX In my opinion the sweet spot is around which gets you GB of RAM GB of storage and an RTX Though I should mention that while you can upgrade storage post purchase you won t be able to upgrade your RAM as it s soldered onto the laptop s motherboard Wrap upSam Rutherford EngadgetThe x might not be quite as powerful as its bigger siblings but given its even more portable dimensions there s a lot to like When compared to a x with GB of RAM a GB SSD and an RTX a similarly equipped x costs just less The main trade offs being a little less thermal headroom a more cramped keyboard and a slightly slower Hz screen instead of Hz on the x That s not a lot to sacrifice for an even more travel friendly thin and light design However if you don t need a new gaming laptop right now the smart move would be to wait a month or two for some of Alienware s competitors to release updated systems for Both Razer and ASUS are coming out with refreshed versions of their inch gaming laptops later this spring and once those become available we ll have a much better idea of how the x fares against its biggest rivals But if you like the x s combination of style and sleekness this is a slick gaming laptop that s made to move |
2022-02-16 14:30:13 |
海外TECH |
Engadget |
Senate online safety bill gives children more control over social media |
https://www.engadget.com/senate-kids-online-safety-act-bill-141708555.html?src=rss
|
Senate online safety bill gives children more control over social mediaSenators are still concerned social networks aren t doing enough to protect children The Washington Postreports Senators Marsha Blackburn and Richard Blumenthal have introduced a bill the Kids Online Safety Act KOSA that would give kids more control over their privacy and safety on social media while setting stricter guidelines for the companies in question Most notably social media firms would have to give children under tools to protect their data turn off quot addictive quot features and bow out of algorithm based recommendations The quot strongest settings quot would have to be enabled by default according to the bill Parents would also get controls to help pinpoint harmful behavior while both camps would receive a dedicated channel for reporting those harms affecting children Social networks meanwhile would have to quot prevent and mitigate quot exposure to inappropriate content including self harm eating disorders sexual exploitation and alcohol They would also have to conduct yearly independent audits of their KOSA compliance and the risks to children Similarly the social sites would have to turn over quot critical datasets quot to academic and public interest researchers hoping to study child safety The bill is effectively a response to months of inquiries into tech giants handling of child safety with a particular focus on the testimony of Facebook now Meta whistleblower Frances Haugen She called on the company to make multiple changes to protect children including an end to algorithmic ranking opening up its research and modifying the Communications Decency Act s Section for more accountability Senators also asked Instagram head Adam Mosseri to testify after concerns Meta might not have told the truth about hiding research into harmful effects on children We ve asked Meta for comment It has made changes in response to calls for greater child protections including offers to share data and teen safety features like screen time tracking break reminders and bulk content deletion There are no guarantees KOSA will pass the Senate let alone become law It would join existing legislation that includes COPPA which protects internet privacy for children under The bipartisan nature of the bill may help though Blumenthal is also tenacious in attempts to curb harmful online behavior This is the second bill tackling Big Tech that Blumenthal has introduced in recent weeks after reintroducing the controversial EARN IT Act |
2022-02-16 14:17:08 |
海外TECH |
Engadget |
How NASA spots potentially catastrophic geomagnetic storms before they strike |
https://www.engadget.com/nasa-geomagnetic-storm-detection-helioswarm-140045068.html?src=rss
|
How NASA spots potentially catastrophic geomagnetic storms before they strikeA recent batch of SpaceX s Starlink internet beaming cubesats met with tragedy on February rd when a member cohort of the newly launched satellites encountered a strong geomagnetic storm in orbit “These storms cause the atmosphere to warm and atmospheric density at our low deployment altitudes to increase In fact onboard GPS suggests the escalation speed and severity of the storm caused atmospheric drag to increase up to percent higher than during previous launches SpaceX wrote in a blog update last Wednesday “The Starlink team commanded the satellites into a safe mode where they would fly edge on like a sheet of paper to minimize drag Unfortunately of the satellites never came out of safe mode and as of Wednesday s announcement are expected to if they haven t already fall to their doom in Earth s atmosphere While this incident constitutes is only a minor setback for SpaceX and its goal of entombing the planet with more than of the signal bouncing devices geomagnetic storms pose an ongoing threat to the world s electrical infrastructure ーinterrupting broadcast and telecommunications signals damaging electrical grids disrupting global navigation systems while exposing astronauts and airline passengers alike with dangerous doses of solar radiation The NOAA defines geomagnetic storms as “a major disturbance of Earth s magnetosphere that occurs when there is a very efficient exchange of energy from the solar wind into the space environment surrounding Earth Solar winds composed of plasma and high energy particles are ejected from the Sun s outermost coronal layers and carry the same charge as the sun s magnetic field oriented either North or South When that charged solar wind hits Earth s magnetosphere ーmoreso if it is especially energetic or carries a southern polarization ーit can cause magnetic reconnection of the dayside magnetopause This in turn accelerates plasma in that region down the atmosphere s magnetic field lines towards the planet s poles where the added energy excites nitrogen and oxygen atoms to generate the Northern Lights aurora effect That extra energy also causes the magnetosphere itself to oscillate creating electrical currents which further disrupt the region s magnetic fields ーall of which make up magnetic storms “Storms also result in intense currents in the magnetosphere changes in the radiation belts and changes in the ionosphere including heating the ionosphere and upper atmosphere region called the thermosphere notes the NOAA “In space a ring of westward current around Earth produces magnetic disturbances on the ground Basically when the Sun belches out a massive blast of solar wind it travels through space and smacks into the Earth s magnetic shell where all that energy infuses into the planet s magnetic field causing electrical chaos while making a bunch of atoms in the upper reaches of the atmosphere jiggle in just the right way to create a light show Behold the majesty of our cosmos the celestial equivalent of waving away a wet burp from the slob next to you at the bar Solar flares occur with varying frequency depending on where the Sun is in its year solar cycle with fewer than one happening each week during solar minimums to multiple flares daily during the maximal period Their intensities oscillate similarly though if the electromagnetic storm of ーthe largest such event on record dubbed the Carrington Event ーwere to occur today its damage to Earth s satellite and telecom systems is estimated to run in the trillions of US dollars requiring months if not years of repairs to undo The event pushed the Northern aurora borealis as far south as the Caribbean and energized telegraph lines to the point of combustion A similar storm in March of was only as third as powerful as Carrington but it still managed to straight up melt an electrical transformer in New Jersey as well as knock out Quebec s power grid in a matter of seconds stranding million customers in the dark for nine hours until the system s equipment could be sequentially checked and reset European Space AgencyEven when they re not electrocuting telegraph operators or demolishing power grids geomagnetic storms can cause all sorts of havoc with our electrical systems Geomagnetically induced currents can saturate the magnetic cores within power transformers causing the voltage and currents traveling within their coils to spike leading to overloads Changes within the structure and density of the Earth s ionosphere due to solar storms can disrupt and outright block high frequency radio and ultra high frequency satellite transmissions GPS navigation systems are similarly susceptible to disruption during these events quot A worst case solar storm could have an economic impact similar to a category hurricane or a tsunami quot Dr Sten Odenwald of NASA s Goddard Space Flight Center said in quot There are more than working satellites with an estimated replacement value of billion to billion supporting a billion per year industry One scenario showed a superstorm costing as much as billion due to a combination of lost satellites service loss and profit loss quot Most importantly to SpaceX solar storms can increase the amount of drag the upper edges of the atmosphere exert upon passing spacecraft There isn t much atmosphere in low Earth orbit where the ISS and a majority of satellites reside but there is enough to cause a noticeable amount of drag on passing objects This drag increases during daylight hours as the Sun s energy excites atoms in lower regions of the atmosphere pushing them higher into LEO and creating a higher density layer that satellites have to push through Geomagnetic storms can exacerbate this effect by producing large short term increases in the upper atmosphere s temperature and density NOAA“There are only two natural disasters that could impact the entire US University of Michigan researcher Gabor Toth said in a press statement last August “One is a pandemic And the other is an extreme space weather event quot We have all these technological assets that are at risk quot he continued quot If an extreme event like the one in happened again it would completely destroy the power grid and satellite and communications systems ーthe stakes are much higher quot Austin Brenner University of MichiganIn order to extend the time between a solar eruption and its resulting winds slamming into our magnetosphere Toth and his team have worked to develop the Geospace Model version which is what the NOAA currently employs using state of the art computer learning systems and statistical analysis schemes With it astronomers and power grid operators are afforded a scant minutes of advanced warning before solar winds reach the planet ーjust enough time to put vital electrical systems into standby mode or otherwise mitigate the storm s impact Toth s team relies on X ray and UV data “from a satellite measuring plasma parameters one million miles away from the Earth he explained in order to spot coronal mass ejections as they happen “From that point we can run a model and predict the arrival time and impact of magnetic events quot Toth said NASA has developed and launched a number of missions in recent years to better predict the tumultuous behavior of our local star In for example the space agency launched the STEREO Solar TErrestrial RElations Observatory mission in which a pair of observatories measured the “flow of energy and matter from the Sun to Earth Currently NASA is working on two more missions ーMulti slit Solar Explorer MUSE and HelioSwarm ーto more fully understand the Sun Earth connection “MUSE and HelioSwarm will provide new and deeper insight into the solar atmosphere and space weather Thomas Zurbuchen associate administrator for science at NASA said in a February news release “These missions not only extend the science of our other heliophysics missionsーthey also provide a unique perspective and a novel approach to understanding the mysteries of our star MUSE aims to study the forces that heat the corona and drive eruptions in that solar layer “MUSE will help us fill crucial gaps in knowledge pertaining to the Sun Earth connection Nicola Fox director of NASA s Heliophysics Division added “It will provide more insight into space weather and complements a host of other missions within the heliophysics mission fleet The HelioSwarm on the other hand is actually a collection of nine spacecraft tasked with taking “first multiscale in space measurements of fluctuations in the magnetic field and motions of the solar wind quot The technical innovation of HelioSwarm s small satellites operating together as a constellation provides the unique ability to investigate turbulence and its evolution in the solar wind quot Peg Luce deputy director of the Heliophysics Division said These ongoing research efforts to better comprehend our place in the solar system and how to be neighborly with the massive nuclear fusion reactor down the celestial block are sure to prove vital as humanity s telecommunications technologies continue to mature Because no matter how hardened our systems we simply cannot afford a repeat of |
2022-02-16 14:00:45 |
金融 |
RSS FILE - 日本証券業協会 |
PSJ予測統計値 |
https://www.jsda.or.jp/shiryoshitsu/toukei/psj/psj_toukei.html
|
統計 |
2022-02-16 16:00:00 |
金融 |
RSS FILE - 日本証券業協会 |
株主コミュニティの統計情報・取扱状況 |
https://www.jsda.or.jp/shiryoshitsu/toukei/kabucommunity/index.html
|
株主コミュニティ |
2022-02-16 15:30:00 |
ニュース |
BBC News - Home |
Police to investigate Prince Charles' charity |
https://www.bbc.co.uk/news/uk-60404077?at_medium=RSS&at_campaign=KARANGA
|
london |
2022-02-16 14:01:56 |
ニュース |
BBC News - Home |
Flood-risk areas told to prepare for Friday's Storm Eunice |
https://www.bbc.co.uk/news/uk-england-60403455?at_medium=RSS&at_campaign=KARANGA
|
surge |
2022-02-16 14:50:09 |
ニュース |
BBC News - Home |
Captain Williamson says England want to make Arnold Clark Cup 'our own' |
https://www.bbc.co.uk/sport/football/60402717?at_medium=RSS&at_campaign=KARANGA
|
Captain Williamson says England want to make Arnold Clark Cup x our own x Captain Leah Williamson says England want to make the Arnold Clark Cup our own and use it as a taster for this summer s Euros |
2022-02-16 14:06:56 |
北海道 |
北海道新聞 |
緊張緩和へ外交努力 日英首脳 ウクライナ巡り連携 |
https://www.hokkaido-np.co.jp/article/646575/
|
岸田文雄 |
2022-02-16 23:08:34 |
北海道 |
北海道新聞 |
NY円、115円後半 |
https://www.hokkaido-np.co.jp/article/646629/
|
外国為替市場 |
2022-02-16 23:06:00 |
北海道 |
北海道新聞 |
感染、2月上旬ピーク越え 「医療は逼迫」専門家組織 |
https://www.hokkaido-np.co.jp/article/646627/
|
厚生労働省 |
2022-02-16 23:01:00 |
海外TECH |
reddit |
Ryan Cohen on Twitter |
https://www.reddit.com/r/Superstonk/comments/stwvpw/ryan_cohen_on_twitter/
|
Ryan Cohen on Twitter submitted by u CGabz to r Superstonk link comments |
2022-02-16 14:13:26 |
コメント
コメントを投稿