投稿時間:2022-10-23 07:12:26 RSSフィード2022-10-23 07:00 分まとめ(12件)

カテゴリー等	サイト名等	記事タイトル・トレンドワード等	リンクURL	頻出ワード・要約等/検索ボリューム	登録日
IT	ITmedia 総合記事一覧	[ITmedia ビジネスオンライン] 名古屋タカシマヤ、「レトロ喫茶に恋して」開催　“映える”グルメ大集合、Z世代社員が企画　どんな商品？	https://www.itmedia.co.jp/business/articles/2210/21/news183.html	itmedia	2022-10-23 06:30:00
AWS	lambdaタグが付けられた新着投稿 - Qiita	処理を続けるLambdaを中断させる方法とか	https://qiita.com/ad_motsu/items/0932f0bb2bce6ccb240c	jawsug	2022-10-23 06:50:03
AWS	AWSタグが付けられた新着投稿 - Qiita	処理を続けるLambdaを中断させる方法とか	https://qiita.com/ad_motsu/items/0932f0bb2bce6ccb240c	jawsug	2022-10-23 06:50:03
海外TECH	MakeUseOf	8 Distractions You Can Remove From Photos in Lightroom	https://www.makeuseof.com/adobe-lightroom-distractions-remove-from-photos/	lightroom	2022-10-22 21:30:14
海外TECH	DEV Community	Portswigger’s lab write up: Clickjacking with form input data prefilled from a URL parameter	https://dev.to/christianpaez/portswiggers-lab-write-up-clickjacking-with-form-input-data-prefilled-from-a-url-parameter-1b41	Portswigger s lab write up Clickjacking with form input data prefilled from a URL parameterIn this apprentice level lab we will exploit the change email flow from a website vulnerable to clickjacking due to form filling via url parameters Upon logging in with the given credentials we notice that after going to the acount page all that is needed to change a user s email is click on the Update Email button and that the email input can be prefilled by adding it via url parameters Let s use the writing material s clickjacking template to craft our exploit lt head gt lt style gt iframe position relative width px height px opacity z index div position absolute z index lt style gt lt head gt lt body gt lt div gt CLICK HERE lt div gt lt iframe src LAB ACCOUNT ROUTE URL email attacker email com gt lt iframe gt lt body gt This is how the template looks on our exploit server We need to modify the location of the CLICK ME div tag so that it is on top of the Update Email button on the vulnerable website Note that we are setting the iframe s opacity to to be able to check the exploit appearance and then modifying the div s top and left CSS properties so that when a logged in user clicks on the CLICK ME div on our website they are actually clicking on the vulnerable website s button to update their email to whatever we previously set in the URL parameters After setting the top property to px and the left property to px it looks like the buttons are aligned to perform a successful attack At this point our exploit looks like this lt head gt lt style gt iframe position relative width px height px opacity z index div position absolute z index top px left px lt style gt lt head gt lt body gt lt div gt CLICK HERE lt div gt lt iframe src LAB ACCOUNT ROUTE URL email attacker email com gt lt iframe gt lt body gt All we need to do is set the iframe s opacity to or something similar so that it is almost invisible and send the exploit to our victim Check out this write up on the Art Of Code Github	2022-10-22 21:13:39
Apple	AppleInsider - Frontpage News	Bono takes the blame for the 2014 iTunes U2 album disaster	https://appleinsider.com/articles/22/10/22/bono-takes-the-blame-for-the-2014-itunes-u2-album-disaster?utm_medium=rss	Bono takes the blame for the iTunes U album disasterU frontman Bono takes the blame for the ill fated iTunes album giveaway of an extract from his memoir reveals but while Apple took heat for the endeavor CEO Tim Cook apparently wasn t fazed by the response at all Apple CEO Tim Cook with U in Apple s gift of a free copy of the U album Songs of Innocence was seen as a massive blunder for the music selling service with complaints from many forcing Apple to come up with instructions to remove the album from user libraries Read more	2022-10-22 21:08:17
海外TECH	Engadget	Meta threatens to block news content in Canada over media revenue-sharing legislation	https://www.engadget.com/meta-threatens-to-block-facebook-news-content-canada-bill-c-18-211424655.html?src=rss	Meta threatens to block news content in Canada over media revenue sharing legislationFacebook parent company Meta says it may stop Canadians from sharing news content in response to the country s proposed Bill C legislation Introduced by the ruling Liberal government earlier this year The Online News Act seeks to force platforms like Facebook into revenue sharing partnerships with local news organizations The legislation is modeled after Australia s News Media Bargaining Code which the country successfully passed in early after considerable resistance from Google and Meta In a blog post published late Friday Meta said it wanted to be “transparent about the possibility that we may be forced to consider whether we continue to allow the sharing of news content in Canada The threat came after the House of Commons Heritage Committee did not invite Meta to a meeting about the legislation earlier in the week The panel did hear testimony from Google though only after the company asked to be included in the proceedings “We have always approached our engagement with Canadian public authorities on this legislation in the spirit of honest and fair debate and so were surprised not to receive an invitation to participate particularly given public comments by lawmakers that this law is targeted at Facebook Meta said following the snub The Canadian government and social media giant have had an acrimonious relationship ever since CEO Mark Zuckerberg and former COO Sheryl Sandberg ignored subpoenas from the parliament s ethics committee in The bill s sponsor Heritage Minister Pablo Rodriguez accused Meta of using the same playbook the company employed in Australia “All we re asking the tech giants like Facebook to do is negotiate fair deals with news outlets when they profit from their work he told The National Post Among other objections Meta claims news content is not a significant source of revenue for the company When Australia enacted its News Media Bargaining Code Meta briefly cut access to all news content within the country However the company eventually signed agreements with organizations like News Crop to carry their coverage	2022-10-22 21:14:24
ニュース	BBC News - Home	Rishi Sunak and Boris Johnson hold talks as ex-chancellor leads PM race	https://www.bbc.co.uk/news/uk-politics-63361384?at_medium=RSS&at_campaign=KARANGA	Rishi Sunak and Boris Johnson hold talks as ex chancellor leads PM raceThe former PM and the leadership frontrunner hold talks as the deadline for nominations in the contest to replace Liz Truss edges nearer	2022-10-22 21:28:16
ニュース	BBC News - Home	Ukraine war: Massive Russian strikes target energy grid - Zelensky	https://www.bbc.co.uk/news/world-europe-63357393?at_medium=RSS&at_campaign=KARANGA	scale	2022-10-22 21:17:16
ニュース	BBC News - Home	Dietrich Mateschitz: Red Bull co-owner & energy drink giant dies aged 78	https://www.bbc.co.uk/sport/formula1/63100448?at_medium=RSS&at_campaign=KARANGA	drinks	2022-10-22 21:33:54
ビジネス	ダイヤモンド・オンライン - 新着記事	FRB利上げの行方、12月のペース減速が焦点に - WSJ発	https://diamond.jp/articles/-/311764	行方	2022-10-23 06:23:00
ビジネス	東洋経済オンライン	｢保守王国｣石川の"空気"から見えてくるもの ｢裸のムラ｣五百旗頭監督が語る地方局の可能性 | 映画・音楽 | 東洋経済オンライン	https://toyokeizai.net/articles/-/626858?utm_source=rss&utm_medium=http&utm_campaign=link_back	五百旗頭	2022-10-23 06:30:00