投稿時間:2023-01-27 02:19:30 RSSフィード2023-01-27 02:00 分まとめ(23件)

カテゴリー等	サイト名等	記事タイトル・トレンドワード等	リンクURL	頻出ワード・要約等/検索ボリューム	登録日
AWS	AWS Database Blog	Maintain query plan stability when migrating your Oracle workload to Amazon RDS for Oracle	https://aws.amazon.com/blogs/database/maintain-query-plan-stability-when-migrating-your-oracle-workload-to-amazon-rds-for-oracle/	Maintain query plan stability when migrating your Oracle workload to Amazon RDS for OracleA common challenge faced by customers migrating their application to a new Amazon Relational Database Service Amazon RDS for Oracle environment is unexpected performance degradations caused by query plans changes Any of the following migration factors can lead to query plan digression and in this post we outline a strategy to proactively address these stumbling …	2023-01-26 16:53:10
Ruby	Railsタグが付けられた新着投稿 - Qiita	Rails Sprockets::Rails::Helper::AssetNotFound の解決に色々頑張った話	https://qiita.com/Akane-Toribe/items/77956c7149acc734dcba	localhost	2023-01-27 01:27:04
技術ブログ	Mercari Engineering Blog	メルカリにおける機械学習による検索のリランキングへの道のり	https://engineering.mercari.com/blog/entry/20230101-the-journey-to-machine-learned-re-ranking/	hellip	2023-01-26 16:30:59
技術ブログ	Developers.IO	GKE（Google Kubernetes Engine）クラスタにアプリをデプロイする	https://dev.classmethod.jp/articles/google-kubernetes-engine-deploy-app-cluster/	cloud	2023-01-26 16:23:45
海外TECH	MakeUseOf	A Complete Guide to One-Handed Photography	https://www.makeuseof.com/one-handed-photography-guide/	handed	2023-01-26 16:30:15
海外TECH	MakeUseOf	How to Add a Full Battery Charge Notification to Windows 10 & 11	https://www.makeuseof.com/full-battery-charge-notification-windows/	windows	2023-01-26 16:16:16
海外TECH	DEV Community	Protegendo sua API NodeJs contra ReDos Attack[Parte 1]	https://dev.to/r9n/protegendo-sua-api-nodejs-contra-redos-attackparte-1-16mc	Protegendo sua API NodeJs contra ReDos Attack Parte Fala povo bonito como estão Espero que esteja indo tudo bem por aíHoje vamos falar sobre ReDos Attack Antes de começarmos quero dizer que decidi dividir esse artigo em partes pois quero que quem esteja começando no mundo do NodeJs Javascript seja backend ou front end entenda o que eu estou dizendo Não sou muito fãde deixar conhecimentos implícitos e meu objetivo éatingir pessoas que ainda não conheciam esses conceitos funcionalidades Portanto temos a seguinte divisão para artigo Protegendo sua API NodeJs contra ReDos Attack Parte Édefinição do que éexpressão regular como usar o que éReDos e como ele ocorre Protegendo sua API NodeJs contra ReDos Attack Parte Aqui éa apresentada a minha proposta de solução que inclusive pode ser generalizado para outros casos de operações que levem muito tempo para serem computadas e possam prejudicar o funcionamento do NodeJs Explicando o que eu usei e porquêeu usei Protegendo sua API NodeJs contra ReDos Attack Parte Aqui éfeito um teste de funcionalidade da solução proposta para ver se ela de fato resolve o problema além de ser feito um teste de carga para verificar se a solução éescalável quando nossa API ficar sob um tráfego intenso de requisições Lembrando que isso éapenas uma proposta de solução baseado nas situações que jávi e que játratei Não estou dizendo que seja a melhor nem a pior éapenas mais uma opção beleza Por isso se vocêsóquer ver a solução pode pular para a segunda parte e se vocêsóquer ver se isso realmente funciona então a terceira parte éo seu objetivo Sem mais delongas bora pro conteúdo ReDos Attack ou Regular Expression Denial of Service Attack éum tipo de ataque onde um atacante explora o uso de uma expressão regular mal escrita enviando para a o sistema alvo um payload malicioso que pode fazer com que a expressão regular leve muito tempo para ser computada consumindo uma grande quantidade de recursos computacionais durante esse processo Vamos ver o que éuma expressão regular o que ée como ocorre um ReDos Attack e o que podemos fazer para mitigar esse risco Regex Expression Expressão regular Para entender o que éo ReDos primeiro precisamos ter uma noção do que éuma expressão regular De forma simples uma expressão regular éum padrão que identifica vários elementos de um conjunto ou seja uma expressão regular éum padrão utilizado para saber se determinado texto ou partes desse texto possui alguma característica Por exemplo suponha que vocêtem o seguinte texto não se preocupe com o conteúdo éapenas para ilustrar o exemplo Lorem ipsum dolor sit amet consectetur adipiscing elit Nam sed tempus lorem non tincidunt nisl Nullam eget dui vestibulum blandit lorem ex a sollicitudin erat Phasellus aliquet pharetra orci molestie tincidunt Pellentesque vel egestas nisl Donec malesuada mauris urna eu luctus tortor gravida efficitur Aliquam suscipit risus in sem convallis imperdiet tempus lorem Nullam tincidunt lorem luctus eu urna lorem vestibulum lorem Suponha que vocêquer saber quantas e quais são as palavras que possuem exatamente letras Neste caso vocêpoderia utilizar a seguinte expressão regular b a zA Z bBasicamente o que essa expressão regular diz é Encontre todas as palavras que se inicie com qualquer caractere minúsculo a z ou se inicie com um caractere maiúsculo A Z e que tenha exatamente caracteres O b No início e no final da expressão regular marca o limite de palavra isso serve para evitar que sub palavras sejam contabilizadas ou seja considera apenas palavras inteiras A seguir temos o resultado da expressão regular acima para o texto utilizado no exemplo Não énosso objetivo aqui estudar com profundidade o que éuma expressão regular porém se vocêfaz uso desse mecanismo em seu dia a dia como desenvolvedor então sugiro fortemente se aprofundar mais nesse assunto caso não seja um desenvolvedor sugiro ler mesmo assim pois conhecimento nunca édemais Mais informações sobre expressões regulares pode ser lido aqui definição de Expressão regular Ok agora que játemos uma noção do que éuma expressão regular e como podemos utilizá la vamos ver como ela pode ser prejudicial para o desenvolvimento de um software ReDos AttackNo desenvolvimento de software écomum que os desenvolvedores utilizem expressões regulares para fazer validações de dados em uma validação de formulário émuito comum utilizá las para validar se um e mail estácorreto por exemplo Porém devemos tomar cuidado ao lançar mão de tal artifício pois dependendo de como se monta a expressão podemos deixar nosso sistema vulnerável principalmente quando falamos do NodeJs Dependendo da expressão e da entrada épossível que ocorra um fenômeno chamado Catastrophic evaluation Avaliação catastrófica ou Catastrophic backtracking Retorno catastrófico Essa situação ocorre quando a compilação da expressão regular para uma dada entrada leva tanto tempo e étão custosa que todo o CPU fica ocupado executando aquele processamento impedindo assim que outras tarefas sejam executadas No caso do NodeJs esse fenômeno pode levar ao bloqueio da main thread thread principal o que por sua vez pode levar toda a API Sistema a parar de responder E éexatamente isso que chamados de ReDos Attack ou seja équando um atacante envia intencionalmente payloads dados maliciosos para a API Sistema alvo afim de explorar essa falha deixando assim o sistema alvo inoperante por isso o nome ReDos Re de Regular Expression Dos de Denail of Serviçe ou seja negação de serviço baseado em regex A seguir éexibido um exemplo de expressão regular e input que podem levar àessa situação O site inclusive identifica a situação de loop infinito e interrompe a avaliação da nossa expressão conforme pode ser visto a seguir Conforme veremos mais adiante essa situação no nodeJs pode travar todo o seu sistema e com certeza éalgo que não queremos Então bora para a parte para ver como podemos resolver essa situação Te espero láSegunda Parte	2023-01-26 16:52:07
海外TECH	DEV Community	Sorting Algorithm	https://dev.to/jonnynotbravo/sorting-algorithm-6dj	Sorting Algorithm Sorting Algorithmis an algorithm used for rearranging a given array or list in a specific manner according to a comparison operators on the elements The comparison operator is used to decide the new order of elements in the perspective data structure Some of the most well known sorting algorithms are Bubble SortSelection SortInsertion Sort Merge Sort Quick Sort Heap Sort Bubble Sortis one of the simplest sorting algorithms Bubble sort works by repeatdly swapping the adjacent elements if they are in the wrong order This algorithm is not advised for a large data sets because of it s high time complexity Selection SortConsidering we re sorting a list array in ascending order selection sort sorts a list by repeatdly finding the minimum element from the unsorted part and shifting it to the beginning of the array Insertion SortJust like Bubble Sort insertion sort is one the simplest sorting algorithms The array of list is split into two parts Sorted and unsorted part The values from the unsorted are separated picked and placed at the correct position in the sorted part Merge SortA sorting algorithm that works by dividing an array into smaller subarrays The subarrays are then sorted and then merging the sorted subarrays back together to form the final sorted array This process is repeated until the entire array list is sorted One of the main advantages of merge sort is the time complexity of O n log n which means it can sort large set of arrays relatively quickly and efficient Quick SortLike merge sort quick sort picks picks an element as a pivot and partitions the given array around the picked pivot It partitions an array and calls itself recursively twice to solve the two resulting subarrays Quick Sort is highly efficient for large sets of data with a time complexity of O n Heap SortSimilar to selection sort where we find the minimum element and place the minimum element at the beginning This process is repeated until the entire array list is sorted Heap Sort is not very efficient sorting algorithm when working with highly complex data It is also unstable and might rearrange the relative order ConclusionSorting Algorithm is a set of instructions that take an array or list as an input and arrange an item into a particular order The sorts mostly in numerical or alphabetical order and can be in ascending or descending order	2023-01-26 16:31:40
海外TECH	DEV Community	Deploying ML models straight from Jupyter Notebooks	https://dev.to/aguschin/deploying-ml-models-straight-from-jupyter-notebooks-12bh	Deploying ML models straight from Jupyter NotebooksWinter is a time of magic ‍ ️ Everyone is waiting for something special at this time and Data Scientists aren t different It is not in the power of software developer to be a magician but I can help you deploy your models with literally a single command right from your Jupyter notebook and basically from any place like your command line or Python script check out the deployment Sounds like magic It is To get some winter season vibes let s do some magic ourselves first Let s do something that will help us prepare some fun for our friends for the weekends To do so we ll create a model that translates lyrics to emojis With all due respect to recent advances in NLP and LLM algorithms it s still both easier and more fun to convince your friends to do the backward translation Ok I m sure humans are up to the challenge Alright just before we get into the actual coding everything described in this blog post is available on this Google Colab notebook Now let s get to it First let s load an emoji dataset We need something to base our model on right The secret sauce to creating our emoji language is using a pretrained Distilbert model to tokenize and create embeddings which represent our emoji dictionary We can now similarly embed any word and replace it with its “closest emoji embedding to create our text→emoji translator Using that “Jingle bells should become something like “ Good start it guessed half of the emojis correctly Our part of magic is done now to the single command deployment I promised in the beginning Before we go rogue and deploy it to the cloud let s run a Streamlit app locally to test things out What happened here That innocent looking mlem api save method inspected the model object to find all python packages to install did the magic of preparing the model to be used 🪄Now you should have a Streamlit app at localhost that looks just like this Once we finished playing around with the model locally let s cast our final spell for the day ‍ ️and deploy the model to fly io Some elvish gibberish is printed to the command line and you get a deployment up and ready If you didn t follow along you can just browse to this example deployment 🪄Now before you go remember that these powers extends to serving models as REST API applications Streamlit apps building Docker Images and Python packages and deploying them to Heroku Flyio Kubernetes and AWS Sagemaker Or just go here to get a crash course	2023-01-26 16:10:10
海外TECH	DEV Community	React Portals: A Beginner's Guide to Mastering the Art of Dynamic Components	https://dev.to/abhaysinghr1/react-portals-a-beginners-guide-to-mastering-the-art-of-dynamic-components-6nj	React Portals A Beginner x s Guide to Mastering the Art of Dynamic ComponentsReact is a powerful JavaScript library for building user interfaces but it has one limitation all elements rendered by a React component must be children of the component s parent DOM node However there are certain cases where you may want to render a component outside of its parent For example you may want to create a modal dialog that appears on top of the rest of the content or a tooltip that follows the mouse cursor React portals provide a way to solve this problem by allowing you to render a component into a different DOM node outside of its parent In this guide we ll take a look at what portals are how they work and how to use them to create common UI elements like modals tooltips and more First let s define what portals are In React a portal is a way to render a component into a different DOM node than its parent This is done using the ReactDOM createPortal function which takes two arguments the React component to be rendered and the DOM node where it should be rendered Here s an example of how to use portals to create a modal dialog In this example we have a Modal component that renders a dialog box with a title some content and a close button We want to render this component on top of the rest of the content so we ll use a portal to render it into a div element with an id of modal root import React from react import ReactDOM from react dom class Modal extends React Component render return ReactDOM createPortal lt div gt lt h gt Modal Title lt h gt lt p gt Modal Content lt p gt lt button gt Close lt button gt lt div gt document getElementById modal root In this example we re using the createPortal function to render the Modal component into a DOM node with an id of modal root This means that the modal will appear on top of the rest of the content as if it were a separate page Now let s look at how to use portals to create a tooltip In this example we have a React s portals are a powerful tool that allows developers to render a component outside of its parent component s DOM tree This can be useful in a variety of situations such as when you need to create a modal a tooltip or a floating menu In this blog post we will take a look at what portals are how they work and some examples of how you can use them to enhance your React applications One of the key benefits of portals is that they allow you to render a component in a different location in the DOM without having to re render the entire parent component This is achieved by creating a new root DOM node which is separate from the parent component s DOM tree This new root node acts as a container for the portal component and the portal component is then rendered inside of this container To create a portal in React you will need to use the createPortal function which is exported from the react dom package This function takes two arguments the component you want to render and the DOM node where you want to render it Here s an example of how you would use the createPortal function to create a modal import createPortal from react dom function Modal children return createPortal children document getElementById modal root In this example we are using the createPortal function to render the children prop inside of the modal root DOM node You will also need to create this DOM node somewhere in your HTML file like this lt div id modal root gt lt div gt Now you can use the Modal component in your application and it will be rendered inside of the modal root DOM node Another use case for portals is creating a tooltip The following example demonstrates how to create a tooltip that appears when the user hovers over a button import createPortal from react dom class Tooltip extends React Component state show false toggleShow gt this setState prevState gt show prevState show render const children message this props return lt React Fragment gt children this toggleShow this state show amp amp createPortal lt div gt message lt div gt document body lt React Fragment gt export default Tooltip Usage lt Tooltip message This is the tooltip message gt toggleShow gt lt button onMouseEnter toggleShow onMouseLeave toggleShow gt Hover me lt button gt lt Tooltip gt in the above example when the button is hovered the state of show is toggled and the tooltip message is rendered through the portal to the document body As you can see portals are a powerful tool in the React developer s toolkit They allow you to escape the constraints of the DOM tree and render content in a different location on the page This can be especially useful when dealing with modals tooltips or other UI elements that need to be rendered outside of the component hierarchy To use portals in your own React application you ll need to first import the createPortal function from the react dom package Once you ve done that you can use it to create a portal by passing in the JSX elements you want to render as well as the DOM node that you want to render them into Here s an example of how you might use portals to create a modal in your application import createPortal from react dom function Modal children return createPortal lt div className modal gt children lt div gt document body function App return lt div gt lt button onClick gt setIsModalOpen true gt Open Modal lt button gt isModalOpen amp amp lt Modal gt Hello I m a modal lt Modal gt lt div gt As you can see portals are a powerful tool in the React developer s toolkit They allow you to escape the constraints of the DOM tree and render content in a different location on the page This can be especially useful when dealing with modals tooltips or other UI elements that need to be rendered outside of the component hierarchy To use portals in your own React application you ll need to first import the createPortal function from the react dom package Once you ve done that you can use it to create a portal by passing in the JSX elements you want to render as well as the DOM node that you want to render them into Here s an example of how you might use portals to create a modal in your application import createPortal from react dom function Modal children return createPortal lt div className modal gt children lt div gt document body function App return lt div gt lt button onClick gt setIsModalOpen true gt Open Modal lt button gt isModalOpen amp amp lt Modal gt Hello I m a modal lt Modal gt lt div gt In this example we ve created a Modal component that uses the createPortal function to render a div element with the class modal into the document body We ve also added a button to our App component that when clicked sets the isModalOpen state variable to true causing the modal to be rendered on the page You can use portals to create a wide variety of UI elements such as tooltips dropdowns and even entire pages or sections of your application They are a powerful tool that can help you create more dynamic flexible and reusable components In conclusion portals can be a great way to add some extra functionality and flexibility to your React applications They are a powerful tool that can help you create more dynamic and reusable components and they can be used to create a wide variety of UI elements With the right approach portals can help you create a more efficient effective and user friendly React Thanks for reading my post on React Portals A Beginner s Guide to Mastering the Art of Dynamic Components I hope you found it informative and helpful If you want to stay updated be sure to follow me on Twitter at abhaysinghr Also I am excited to announce that I have created a product Best AI Tools amp Prompts which is completely free and can be downloaded on gumroad It contains a curated list of the best AI tools and prompts to help you enhance your writing process I hope you find it useful and it helps you to take your writing to the next level Thank you for reading and happy writing	2023-01-26 16:08:27
Apple	AppleInsider - Frontpage News	Maxed out Mac mini, Mac Studio, iMac, Mac Pro - what you get for the money	https://appleinsider.com/articles/23/01/26/maxed-out-mac-mini-mac-studio-imac-mac-pro---what-you-get-for-the-money?utm_medium=rss	Maxed out Mac mini Mac Studio iMac Mac Pro what you get for the moneyThe price range for Mac desktops is incredible but we ve compared the significant differences between the base models and maxed out configurations priced between and Comparing maxed out MacsApple s desktop lineup is more varied in design and functionality than its MacBook lineup These computers come in multiple shapes and sizes and have the full range of Apple Silicon available Read more	2023-01-26 16:27:20
海外TECH	Engadget	Tesla Cybertruck won't enter mass production until 2024	https://www.engadget.com/tesla-cybertruck-mass-production-164029626.html?src=rss	Tesla Cybertruck won x t enter mass production until You might not want to count on getting a Cybertruck this year despite promises to the contrary During a conference call discussing Tesla s latest earnings company chief Elon Musk said mass production of the electric pickup won t begin until He still expects manufacturing to kick off quot sometime this summer quot but warned that output would be quot very slow quot early on Tesla is still in the midst of installing assembly equipment Tesla unveiled the Cybertruck in but has delayed its release multiple times The company also warned that the final specs and pricing will change The EV was originally supposed to start at in its single motor configuration and climb to nearly for the tri motor version While the automaker is still taking deposits it s no longer promising specific configurations The pandemic a rough economy longstanding supply chain issues and design tweaks are all expected to influence what you can ultimately buy This isn t a new problem for Tesla Production of the Model started in July but was very limited until mid as the company struggled to clear factory bottlenecks The Cybertruck poses unique challenges however Its signature cold rolled steel body is said to be extra tough but also requires manufacturing techniques not normally used for cars Most production is expected to take place at the Giga Texas factory near Austin which formally opened last April The revised timeline may create problems The Cybertruck is already entering a fiercer competitive landscape that includes the Ford F Lightning GMC Hummer EV and Rivian RT By the time Tesla s production is in full swing it will likely have to take on the Ram EV and Chevy Silverado EV as well as more affordable versions of existing trucks An electric pickup is no longer the novelty it was four years ago and it s not clear if the finished Cybertruck will offer major advantages over its rivals	2023-01-26 16:40:29
海外科学	NYT > Science	Ukraine’s Scientists Receive a Funding Lifeline From Abroad	https://www.nytimes.com/2023/01/25/science/ukraine-scientists-simons-foundation.html	biologists	2023-01-26 16:44:38
金融	金融庁ホームページ	農林中央金庫及び商工組合中央金庫に関する「レバレッジ比率規制に係る告示の一部改正（案）」に対するパブリック・コメントの結果等について公表しました。	https://www.fsa.go.jp/news/r4/ginkou/20230126.html	商工組合中央金庫	2023-01-26 17:00:00
金融	金融庁ホームページ	金融審議会「事業性に着目した融資実務を支える制度のあり方等に関するワーキング・グループ」（第７回）を開催します。	https://www.fsa.go.jp/news/r4/singi/20230125-2.html	金融審議会	2023-01-26 17:00:00
ニュース	BBC News - Home	Transgender rapist Isla Bryson to be moved from women's prison	https://www.bbc.co.uk/news/uk-scotland-64413242?at_medium=RSS&at_campaign=KARANGA	cornton	2023-01-26 16:35:05
ニュース	BBC News - Home	Ukraine hit by Russian missiles day after West's offer of tanks	https://www.bbc.co.uk/news/world-europe-64411259?at_medium=RSS&at_campaign=KARANGA	people	2023-01-26 16:11:27
ニュース	BBC News - Home	Joanna Gosling bids an emotional farewell to BBC News live on-air	https://www.bbc.co.uk/news/entertainment-arts-64418230?at_medium=RSS&at_campaign=KARANGA	gosling	2023-01-26 16:09:34
ニュース	BBC News - Home	Andrew Bridgen threatens to sue Matt Hancock in Covid vaccine row	https://www.bbc.co.uk/news/uk-politics-64414637?at_medium=RSS&at_campaign=KARANGA	health	2023-01-26 16:39:33
ニュース	BBC News - Home	Teachers’ strike dates: When are they and will schools close?	https://www.bbc.co.uk/news/education-63283289?at_medium=RSS&at_campaign=KARANGA	wales	2023-01-26 16:37:14
ニュース	BBC News - Home	Marcelo Bielsa: Ex-Leeds boss in London for further talks with Everton over managerial vacancy	https://www.bbc.co.uk/sport/football/64416720?at_medium=RSS&at_campaign=KARANGA	Marcelo Bielsa Ex Leeds boss in London for further talks with Everton over managerial vacancyMarcelo Bielsa arrives in London for further talks with the Everton hierarchy as they search for a successor to Frank Lampard	2023-01-26 16:41:30
ビジネス	ダイヤモンド・オンライン - 新着記事	【一粒万倍日】より超開運！ 運がいい人、お金持ちの人が節分にしていることベスト1 - 旬のカレンダー	https://diamond.jp/articles/-/316258	今回は、Drコパさんに伺った節分の開運法についてご紹介します。	2023-01-27 02:00:00
ビジネス	ダイヤモンド・オンライン - 新着記事	【人生を変える本】絶望的な状況でも決してあきらめない、夜空を照らす星の海のように輝き続ける生命の物語 - 超圧縮 地球生物全史	https://diamond.jp/articles/-/316570	「地球の誕生」から「サピエンスの絶滅、生命の絶滅」まで全歴史を一冊に凝縮した『超圧縮地球生物全史』は、その奇跡の物語を描き出す。	2023-01-27 01:55:00