投稿時間:2023-02-06 23:25:55 RSSフィード2023-02-06 23:00 分まとめ(29件)

カテゴリー等 サイト名等 記事タイトル・トレンドワード等 リンクURL 頻出ワード・要約等/検索ボリューム 登録日
IT 気になる、記になる… Microsoft、Appleシリコン搭載Macにネイティブ対応した「Skype」のテストを開始 https://taisy0.com/2023/02/06/168155.html apple 2023-02-06 13:57:36
AWS AWS Compute Blog Previewing environments using containerized AWS Lambda functions https://aws.amazon.com/blogs/compute/previewing-environments-using-containerized-aws-lambda-functions/ Previewing environments using containerized AWS Lambda functionsThis post is written by John Ritsema Principal Solutions Architect Continuous integration and continuous delivery CI CD pipelines are effective mechanisms that allow teams to turn source code into running applications When a developer makes a code change and pushes it to a remote repository a pipeline with a series of steps can process the change … 2023-02-06 13:31:59
python Pythonタグが付けられた新着投稿 - Qiita kaggleに初チャレンジ https://qiita.com/k_a_m_n0217/items/9dacab47a48a9b1f82e2 kaggle 2023-02-06 22:32:43
python Pythonタグが付けられた新着投稿 - Qiita Seleniumを用いたTwitterへのログイン及び投稿 https://qiita.com/rinodrops/items/f1cd9c3ddf6cd8a20d05 selenium 2023-02-06 22:31:18
python Pythonタグが付けられた新着投稿 - Qiita 【Python】matplotlibを日本語対応にする方法 https://qiita.com/pnd642/items/741aa1e5af3399aef02e ondainstallcueharajapaniz 2023-02-06 22:16:00
js JavaScriptタグが付けられた新着投稿 - Qiita jQueryでキーコード判別 https://qiita.com/hamsterbee/items/91cc6c0374374aab0bd8 chrome 2023-02-06 22:36:42
Ruby Rubyタグが付けられた新着投稿 - Qiita テストにおけるリーダブルとDRYの両立(あるいは妥協案) https://qiita.com/rubita/items/2aa818c5efbc20c61bb0 重要 2023-02-06 22:22:05
AWS AWSタグが付けられた新着投稿 - Qiita AWS ECS のハンズオンを参考に Rails を ECS にデプロイする例 https://qiita.com/YumaInaura/items/bc6f5910e972ae2d35a8 awsecs 2023-02-06 22:40:12
AWS AWSタグが付けられた新着投稿 - Qiita 【AWS】IAMでスイッチロールを利用して複数アカウントにログインする方法 https://qiita.com/Ryo-0131/items/d90dbb56e879496af47e 複数アカウント 2023-02-06 22:28:25
Docker dockerタグが付けられた新着投稿 - Qiita 【環境構築】Docker + Apache + PHP7.3 + MySQL + phpMyAdmin + GDライブラリ https://qiita.com/mamo_05/items/2520680c15088d7b722a dockerfile 2023-02-06 22:53:00
Git Gitタグが付けられた新着投稿 - Qiita Git flow の手順備忘録 https://qiita.com/Yuu-Miino/items/d0482688d1e624ec5562 gitflow 2023-02-06 22:47:52
Ruby Railsタグが付けられた新着投稿 - Qiita AWS ECS のハンズオンを参考に Rails を ECS にデプロイする例 https://qiita.com/YumaInaura/items/bc6f5910e972ae2d35a8 awsecs 2023-02-06 22:40:12
Ruby Railsタグが付けられた新着投稿 - Qiita Ruby on Rails – local で RAILS_ENV=production でサーバーを起動してもつながらない場合 (コンソールにも何も表示されない) https://qiita.com/YumaInaura/items/4bfc075b22a82907abed production 2023-02-06 22:17:43
海外TECH MakeUseOf How to Spot a Fake Account on Twitter: 6 Ways https://www.makeuseof.com/how-to-spot-a-fake-account-on-twitter/ twitter 2023-02-06 13:30:16
海外TECH MakeUseOf How to Set Up and Use the Exodus Web3 Wallet https://www.makeuseof.com/how-to-set-up-exodus-web3-wallet/ exodus 2023-02-06 13:15:16
海外TECH DEV Community URI VS URL https://dev.to/refine/uri-vs-url-1j3n URI VS URL IntroductionFinding a specific resource on the web can be difficult without a unique method or identifier As a result a man named Tim Berners Lee coined the term URI to aid in identifying the location of a web resource quickly With the introduction of URI you can now find the location of any resource on the web regardless of where you are browsing from In this article you will learn about the concept of a URI its components its architecture and how it differs from a URL URIURI is an abbreviation for Uniform Resource Identifier which refers to a unique identifier composed of a string of characters that points to any resource on the internet via procedures such as name location or both URLs and URNs are the two types of URIs URLs Uniform Resource Locators are web addresses commonly known as website addresses They specify the location of a resource on the Internet and instruct a web browser on how to retrieve it For example the URI specifies the location of a website and instructs a web browser to retrieve it using the HTTPS protocol Web protocols such as HTTP and HTTPS use URIs to communicate with multiple resources on the internet The architecture of URIs is a string of characters that represents the address of a web resource which is usually a combination of the resource s name and address In essence a URI can identify any type of resource including web pages images videos and other types of files They are an essential component of how the Internet works and are used in various contexts including web addresses links and other types of references to online resources Components of URIThe URI architecture is made up of components Each of these components serves a specific purpose which includes the following Protocol A protocol type must be specified before a URI can access a resource Some of the existing protocols are as follows http This is the most widely used protocol on the Internet It is an abbreviation for HyperText Transfer Protocol which is used to access resources on the internet via the HTTP protocol https This is similar to http but it encrypts the data being transferred using a secure connection SSL TLS mailto This protocol generates a link that launches the default email client and sends a new email message to the specified email address file This protocol is used to access files on the local computer ftp This protocol which stands for File Transfer Protocol transfers files across a network Domain name This is the unique name that identifies the website on the Internet Port number This optional component specifies the port number used to access the resource Path This specifies the location of the resource on the server Query string This optional component specifies additional information to be sent to the server when requesting the resource Functions and Architecture of URIA URI s architecture comprise several components including the following Scheme The scheme also known as the protocol specifies the type of resource being identified and how it should be accessed For example http and https are common schemes for webpages whereas ftp is used for file transfers Authority The authority also known as the host contains information about the host that serves the resource such as the domain name or IP address For example in the URI the authority is www example com Path The path also known as the location identifies the resource s location within the authority The path is path to resource in the URI Query The query denoted by a character contains additional information passed to the resource For example the query is q example in the URI Does your CRUD app need server state management Meet the headless React based solution to build sleek CRUD applications With refine you can be confident that your codebase will always stay clean and boilerplate free Try refine to rapidly build your next CRUD project whether it s an admin panel dashboard internal tool or storefront Examples of URILook at more examples of URIs with their representations as follows URI path to resource parameter valueScheme httpsAuthority www debby com Path path to resourceQuery parameter valueURI ftp ftp debby com path to file txt Scheme ftpAuthority ftp debby comPath path to file txtQuery None Syntax Of URITo better understand the components of URI you need to understand the syntax The syntax of a URI usually follows the order Scheme The first part of the URI is the scheme or protocol followed by a colon For instance http or ftp Authority The next part of the URI is the authority which can contain information about the host that serves the resource such as the domain name or IP address www example com or are two examples Path The path represents the location of the resource within the authority and is denoted by a forward slash path to resource for example Query The query is represented by a question mark and contains additional information passed to the resource For example parameter value The different parts of a URI can be combined to form a complete URI as follows lt scheme gt lt authority gt lt path gt lt query gt Examples ftp ftp debby com path to file txtmailto user debby comTel It s important to note that not all URIs will have all components and some may have additional components that are specific to the scheme Use Case of URIURIs play a critical role in the functioning of the Internet because they provide a standard method for computers to locate and access resources URIs are used in many applications and protocols to identify and locate resources on the Internet Here are a few examples of common URI applications Webpages One of the most common use cases of URIs is identifying Internet pages URIs that start with http or https is used to access webpages and other website resources File transfers URIs that start with ftp are used to transfer files between computers Email URIs beginning with mailto are used to generate links that can be used to compose an email message Telephone calls URIs that start with tel generate links that can be clicked to make a phone call Media streaming URIs identify media files that can be streamed over the Internet such as audio or video Database access URIs identify database resources and provide a way for programs to access them Identifying resources in a distributed system URIs are used to identify resources distributed across multiple servers or devices such as files in a distributed file system or services running on a distributed computing platform URLA URL Uniform Resource Locator is a type of URI Uniform Resource Identifier used to identify a resource s location on the Internet A URL is a string of characters that specifies how to access a resource on the Internet typically a webpage or other file A URL comprises several components including the scheme domain name path and query The scheme also known as the protocol specifies the type of resource and how it should be accessed http and https are common schemes for webpages ftp for file transfers and file for files on a local computer The domain name is the hostname or IP address of the server that hosts the resource The path specifies the location of the resource on the server and the query is used to provide additional information to the server Examples of URLsA good example of a URL describing its syntax is as follows fragment Scheme http Authority www example com Path path to resource Query parameter value Fragment fragment Other examples of a URl include ftp ftp example com path to file txtfile path to local file txtIn essence a URL is a type of URI that allows you to find and access resources on the Internet Web browsers servers and other software use it to retrieve and manage Internet resources Benefits of URI over URLURIs Uniform Resource Identifiers are a broader classification of identifiers than URLs Uniform Resource Locators They have several advantages over URLs including Interoperability URIs are more interoperable than URLs because they can be used across different systems and protocols On the other hand URLs are Internet specific and are only used by web browsers and other Internet based applications Namespace independence URLs are specific to the Internet and use a specific naming scheme such as the domain name system whereas URIs are not tied to a specific naming scheme or namespace DNS This means that URIs can identify resources in any namespace whereas URLs can only identify resources in the Internet namespace Abstraction URIs are more abstract than URLs in that they identify a resource without specifying how to access it whereas URLs do This provides more flexibility in how the resource can be accessed Flexibility URIs are more flexible than URLs because they can be used to identify any resource whereas URLs are explicitly used to identify the location of a resource on the Internet Persistence URIs are meant to be persistent which means they should not change over time However URLs can change if the resource they refer to moves or the server s name or address changes ConclusionIn summary URIs are more versatile and flexible than URLs and they are designed to be more persistent and interoperable URIs are more general purpose identifiers that can identify any type of resource whereas URLs are limited to identifying a resource s location on the Internet 2023-02-06 13:43:34
海外TECH DEV Community How to check if an element exists in JavaScript (with examples) https://dev.to/lavary/how-to-check-if-an-element-exists-in-javascript-with-examples-4mpb How to check if an element exists in JavaScript with examples Update This post was originally published on my blog decodingweb dev where you can read the latest version for a user experience rezaIn JavaScript to check if an element exists or not you need to access it first You can use one the following methods to access DOM elements document getElementById document getElementByClassName document querySelector document querySelectorAll Whenever you access a web page the web browser parses the HTML code and populates a DOM tree of all the elements on the page It also makes the DOM available to your JavaScript code via the DOM API And the document object is the entry to the DOM API In these four methods the first two methods return a single DOM element Element if the element exists Otherwise they return null So to check if the element exists in the DOM you need to check the returned value The method document getElementById takes a case sensitive string argument and returns the element whose id property matches the specified string If the element doesn t exist we ll get a null value lt html gt lt body gt lt div id main gt lt div gt lt script gt let element document getElementById main if element null Do something with the element lt script gt lt body gt lt html gt Please note the argument you pass to getElementById is case sensitive meaning main is different from Main The document querySelector method takes a CSS selector or selectors and returns the first element that matches the selector This method returns null if no element matches the specified selector Here s an example lt html gt lt body gt lt div id main gt lt article class post gt lt span class post title gt lt span gt lt article gt lt div gt lt script gt let element document querySelector main post post title if element null Do something with the element lt script gt lt body gt lt html gt Check if an element exists in NodeList objectsUnlike the first two methods the document querySelectorAll method returns a NodeList object This NodeList collection can contain zero or multiple elements that match the specified selectors You can check the number of elements of a NodeList object via its length property If the length is zero it means no elements matches the selector lt html gt lt body gt lt div id main gt lt article class post gt lt span class post title gt lt span gt lt article gt lt div gt lt script gt let postTitles document querySelectorAll main post post title if postTitles length Do something with the elements lt script gt lt body gt lt html gt The document getElementByClassName method also returns an array like object called an HTMLCollection The HTMLCollection interface has a length property too You can convert both NodeList and HTMLCollection objects into arrays with Array from methods let postTitles document querySelectorAll main post post title postTitles Array from postTitles if postTitles length Do something with the elements Final notesAlways access DOM when the initial HTML document has been completely loaded and parsed You might get unexpected results if you place your JavaScript code inside the lt head gt section The reason is the browser parses the document from top to bottom and it might evaluate your JavaScript code before the elements are inserted into the DOM tree It s a good practice to place your JavaScript code before the closing body tag just like the above example If you have to place your code before the body tag you can use the DOMContentLoaded event to ensure your code only runs after the DOM content is loaded lt html gt lt head gt lt script gt window addEventListener DOMContentLoaded function let postTitles document querySelectorAll main post post title if postTitles length console log found Do something with the elements lt script gt lt head gt lt body gt lt div id main gt lt article class post gt lt span class post title gt lt span gt lt article gt lt div gt lt body gt lt html gt If you get a ReferenceError when accessing the document check this quick guide on fixing document is not defined error Thanks for reading ️You might like Cannot find module error in Node js Fixed TypeError map is not a function in JavaScript in JavaScript Fixed Add commas to numbers in JavaScript Explained with examples SyntaxError Unexpected end of JSON input in JavaScript Fixed How to fix ReferenceError document is not defined in JavaScript 2023-02-06 13:41:10
海外TECH DEV Community FLiP Stack Weekly for 06 February 2023 https://dev.to/tspannhw/flip-stack-weekly-for-06-february-2023-1j2a FLiP Stack Weekly for February February FLiP Stack WeeklyWelcome to the fifth newsletter of Some exciting news is coming in a few weeks Tim Spann PaaSDev type application x shockwave flash wmode transparent width height gt type application x shockwave flash wmode transparent width height gt CFPs PODCASTTake a look at recent podcasts in audio or video format feature emb imp woyt CODE COMMUNITYJoin my meetup group NJ NYC Philly Virtual This is Issue Meetup New Slides Labs Training DIY Articles utm medium social amp utm source twitter amp hss channel tw utm medium email lucas rodriguezz event storming a technique to understand complex projects baccbb Tools Devices Tutorials 2023-02-06 13:38:00
海外TECH DEV Community GitHub repositories for developers everyone should know🤩🚀 https://dev.to/ishratumar/github-repositories-for-developers-everyone-should-know-49d GitHub repositories for developers everyone should knowMost Recommended Repositories for Aspiring Developers There are thousands of GitHub repositories available out there and finding some of them can be overwhelming I ve selected the top six repositories that every developer should keep on hand The following list includes some top notch GitHub repositories that are very helpful for developers Build Your Own XThis repository contains detailed instructions for building your favorite technologies from scratch I think it s a very effective way to learn Public APIsThere is no better repository of free APIs than this one You will not find a more comprehensive collection of free APIs anywhere else APIs are grouped by category Over APIs are listed in categories Coding Interview UniversityThe following is a complete study guide for becoming a software engineer You won t find a better roadmap or study plan than this one for becoming a software engineer If you plan to apply for jobs at Amazon Facebook and Google you really need this resource Free Programming BooksThere is no better source of knowledge than books Those who enjoy reading programming books will find this repository helpful This repository has free programming books that you can download Project Based LearningThe best way to learn something is to put it into practice If you want to learn how to create your own applications from scratch here is a list of tutorials for aspiring developers Developer RoadmapWith these roadmaps guides and other educational resources you can learn about the software development field and advance your career Here you ll find almost a roadmap for every programming language whether it be for Frontend Backend or DevOps You should check out this repository Wrap UpThat s all for today As always thank you for reading If you find this helpful ️like share and follow me to read more articles on HTML CSS JavaScript ReactJS and other free resources You can also find me on Twitter GitHub Hashnode and Medium 2023-02-06 13:36:40
海外TECH DEV Community Mastodon for Developers: Everything You Need to Know https://dev.to/oktadev/mastodon-for-developers-everything-you-need-to-know-2hhf Mastodon for Developers Everything You Need to KnowOriginally published at auth com What Is Mastodon Mastodon is an open source distributed micro blogging platform that can host social networking sites It was created by Eugen Rochko and was first released in It is similar to Twitter regarding features target audience and user experience But unlike Twitter it is run on a decentralized network of servers each of which is called an instance This does not mean that you have fragmented silos instances are federated which means you can talk to other instances follow people and see content from other instances making Mastodon the ideal decentralized social network Any single company does not own the Mastodon network and users can join any instance they wish The federation allows people to connect and interact with each other across different instances making Mastodon more open secure and free than something like Twitter This means no single entity has absolute control over Mastodon which is a big advantage over traditional social networks like Twitter which is owned by a single company and is not open source After the recent Twitter saga it s clear why this is a major benefit However this does not mean there is no moderation Quite the contrary actually Each instance can have its own rules and can moderate content as they see fit This means you can join an instance that is more aligned with your values and beliefs or even hosts your own if you have the necessary resources Why Should You Care about Mastodon Platforms like Twitter Facebook Instagram and TikTok make most of their revenue from advertisements This means they are selling our attention to advertisers How do you keep someones attention Our brains are naturally wired to seek dopamine reward pathways and algorithms used by these social media often target dopamine pathways to create a feeling of reward and reinforcement that encourages people to keep using their services This is done by providing users with a steady stream of new content and positive feedback such as likes and comments which stimulates dopamine production in the brain This can lead to people becoming addicted to social media as they constantly seek out the reward of dopamine that comes with using the platform In addition many platforms use algorithms to personalize content and increase the chance of a positive outcome further encouraging people to use the service But that s not all these algorithms also use tactics like amplifying content that is reactionary sensational or frightening which grabs our attention Platforms like Mastodon which does not operate for profit do not have any incentives to follow similar tactics This does not mean that it is not possible as a Mastodon instance can choose to serve advertisements But since you have control as a user you can choose to join an instance that does not serve advertisements This means that algorithms are not manipulating you to keep you hooked on the platform This is a big advantage over platforms like Twitter which are designed to keep you hooked on the platform making it easier to sow division and hatred by nefarious actors Mastodon is an important platform for anyone who values their freedom security mental health and privacy online It is a great alternative to Twitter for those who are looking for a more open and secure platform to connect with others without having to worry about being harassed or bullied It is quite customizable and provides greater control over your data With its growing user base Mastodon is quickly becoming the go to platform for many people looking for a better way to connect with others and get out of the grasp of BigTech What Is Fediverse and How Does It Work Fediverse is the term used to describe a network of interconnected servers that can communicate with each other using decentralized networking protocols Fediverse is bigger than Mastodon and can include among others Mastodon servers social networking and microblogging Friendica servers social networking and microblogging PeerTube servers video hosting Pleroma servers social networking and microblogging Fediverse networks can be used for social networks file hosting services and so on Fediverse works using several different communication protocols The most important ones are ActivityPub OStatus and diaspora ActivityPub is a protocol that allows servers to communicate with each other It is a decentralized protocol based on the ActivityStreams standard Mastodon PeerTube and Pleroma use ActivityPub OStatus is a decentralized protocol based on the Atom Syndication Format OStatus is a predecessor to ActivityPub and is used by older instances of Mastodon and Pleroma Diaspora is a decentralized protocol Mastodon Friendica and Pleroma use it Any server that supports one of these protocols can communicate with other servers that support the same protocol It is difficult to estimate the number of users in Fediverse due to the distributed nature but rough third party estimates put it at around million users This is a small fraction of the number of users on Twitter but it is growing rapidly as well as the number of instances Choosing ServersOne of the biggest strengths of Mastodon decentralization is also its biggest hurdle when it comes to adoption This means that there is no single place to sign up for Mastodon Instead you have to choose an instance to join Choosing a server could be a daunting task especially if you are new to Mastodon There are some factors to consider when choosing a server These include Quality and reliability of the serverCommunity and moderationRules and PoliciesNon profit statusChoosing a server based on this is important but it s not as critical as it seems This is because you can follow people from other servers and see their content in your timeline This means you can join a server that is more aligned with your values and beliefs and still follow people from other servers This is one of the biggest advantages of Mastodon over Twitter where you are forced to follow people from the same server Not just that Mastodon lets you move from one server to another in case you choose a server that turns out to be unreliable or you realize that you disagree with the server s policies You can also easily import your data like your followers and people you follow to the new server So choose a server you feel comfortable with and stick around to see how it goes You can always move to another server if you don t like it As of this writing there are over instances of Mastodon which is growing daily This means that there is a Mastodon instance for everyone You can find a list of Mastodon instances on instances social Recommended serversFor technical folks like developers you could consider joining one of these servers fosstodon org Ideal for developers especially if you are an open source enthusiastmstdn social It s a general purpose server with a good community and is quite reliablemastodon social The official Mastodon server with a good community and is quite reliablehachyderm io A server for tech industry professionalstechhub social A server for technology enthusiasts Building a Timeline Based on Hashtags and FollowsUnlike Twitter when you join a Mastodon server you will not be greeted by a timeline with interesting posts and recommendations for people to follow Instead you are going to be greeted by an empty timeline This is by design as Mastodon does not have any algorithm or recommendation system and you will not be following people from the same server This means that you have to build your timeline by following people and hashtags This is a good thing as it gives you more control over your timeline and you will not be bombarded with content you are not interested in You can find and follow people from other instances by searching for their usernames For example if you want to follow me you can search for my username deepu or deepu mastodon socialSimilarly you can also follow hashtags look for the button on the top right corner of the screen when you are on the hashtag page This works on the web version and some mobile clients It is important to follow people and hashtags you are interested in to have interesting content on your timeline You can mute people you are not interested in You can also filter hashtags or words you don t want to see on your timeline This is a great way to keep your timeline clean and free of unwanted content If you are migrating from Twitter Movetodon org is a great tool to help you find and follow people from Twitter on Mastodon Cross PostingIf you prefer to keep your Twitter account and cross post to Mastodon and vice versa you can use some tools to do so including writing your own scripts using Twitter and Mastodon APIs My personal favorite is moa party It supports cross posting to and from Twitter and Mastodon and is simple to setup and use It can also post from Instagram to Mastodon It is open source and you can host it yourself if you don t want to give the service access to your Twitter Mastodon accounts using OAuth Securing the AccountAs usual it is important to keep your Mastodon account secure This includes using a strong password using a password manager and enabling two factor authentication FA Mastodon supports FA using TOTP Time based One time Password Algorithm authenticator apps like Google Authenticator and FIDO security keys like Yubikey You can also verify your Mastodon account by linking your official website GitHub profile and so on This is a great way to prove that you are the owner of the account and prevent impersonation To do this go to Preferences gt Appearance gt Profile metadata and copy the verification URL and add it to your website as instructed For the GitHub profile add your Mastodon profile URL in the GitHub profile s website field For example my Mastodon profile URL is deepu Now add your website or GitHub profile URL to your Mastodon profile metadata and save Moving between ServersIf you decide to move from one Mastodon server to another here are a few tips to make the process smooth First create a profile on the new server you want to use Note that this will be a new username as Mastodon usernames include the server name and you need to choose a username that is available on the new server Export your data from the old server by going to Preferences gt Import and export gt Data export You will get CSV files for each item you export like Follows mutes and so on Create an account alias in your new account by going to Preferences gt Account gt Account settings gt Moving from a different account This will allow you to redirect your old account and move followers from your old account to the new account Now from your old account redirect to the new account by going to Preferences gt Account gt Account settings gt Moving to a different account This will redirect your old account to the new account and all your followers will be moved to the new account Now from your new account go to Preferences gt Import and export gt Import and import the CSV files that you exported from your old account This will import all your follows mutes lists and so on to the new account ConclusionMastodon is a great alternative to Twitter and is a great way to connect with people from around the world without worrying about a single entity dictating what you can and cannot do with your social media It is a great way to build a community around your projects and share your thoughts and ideas It is also a great way to connect with people from the open source community I hope this guide will help you get started with Mastodon If you like this article please leave a like or a comment You can follow me on Mastodon and LinkedIn 2023-02-06 13:34:14
海外TECH DEV Community ESXiArgs encryption malware launches massive attacks against VMware ESXi servers https://dev.to/xakrume/esxiargs-encryption-malware-launches-massive-attacks-against-vmware-esxi-servers-pfe ESXiArgs encryption malware launches massive attacks against VMware ESXi serversHosting providers and CERT FR warn A new ransomware named ESXiArgs has compromised more than VMware ESXi servers in a recent massive hacking campaign The attackers are exploiting a two year old vulnerability CVE in OpenSLP port that allows them to execute remote commands on the vulnerable servers The vulnerability is related to a dynamic memory overflow in OpenSLP that can be exploited by unauthenticated attackers This vulnerability affects ESXi version x ESXi version x and ESXi version x Once inside the victim s system the ransomware encrypts the files on the ESXi server and leaves a ransom note demanding in bitcoins to decrypt the data The encrypted files have extensions like vmxf vmx vmdk vmsd and nvram An analysis by experts at OVHcloud suggests that the Nevada encryption engine was responsible for the attacks CERT FR experts recommend installing patches that have been available for a while and checking all vulnerable systems for signs of compromise As a last resort they recommend disabling OpenSLP An analysis of the malware by IS expert Michael Gillespie shows that the encryptor has no weaknesses that would allow victims to recover files without paying the ransom The malware uses the Sosemanuk encryption algorithm Although the malware operators claim to steal data before encrypting it victims refute this information and their traffic statistics show no signs of data theft It is worth noting that an exploit for this problem has been available since spring and appeared shortly after the bug was disclosed It is not at all clear why attackers would wait until now to exploit this bug CERT FR experts strongly recommend everyone to install the patches that have long been available as soon as possible and to check all vulnerable systems for signs of compromise As a last resort the experts recommend at least disabling OpenSLP An analysis by experts at cloud service provider OVHcloud blamed the recent Nevada encryption engine for the massive attacks The experts wrote that attacks primarily target ESXi servers up to version Ui via the OpenSLP port At the same time other experts speculated that a version of the Cheerscrypt ransomware based on leaked sources of the Babuk crypto ransomware could be behind the attacks Bleeping Computer reports that victims are actively communicating and asking for help on its forums According to the data collected most of the affected organizations were using ESXi servers leased from cloud providers The ransomware encrypts files with vmxf vmx vmdk vmsd and nvram extensions on compromised servers and creates an args file with metadata for each encrypted document presumably needed for decryption for volume in IFS n esxcli storage filesystem list grep vmfs volumes awk F print do echo START VOLUME volume IFS n for file e in find vmfs volumes volume type f name vmdk o name Vmx o name vmxf o name vmsd o name vmsn o name ‚vswp o name vmss o name nvram o name vmem do if f file e then size kb du k file e awk print if size kb eq then size kb fi size step if size kb gt then size step size kb fi echo START ENCRYPT file e SIZE size kb STEP SIZE size step file e size step size kb echo size step size kb gt file e args nohup CLEAN DIR encrypt CLEAN DIR public pem file e size step size kb gt dev null gt amp amp fi done IFS doneAlthough malware operators claim to steal data before encrypting it victims refute this information Victim s traffic statistics show no signs of data theft French cloud provider OVH and the French CERT were the first to report the incident as most of the affected servers are located in France According to Censys ransom note file search more than servers have been encrypted so far and about a third of them are located in France 2023-02-06 13:07:26
Cisco Cisco Blog Cisco secures IoT, keeping security closer to networking https://blogs.cisco.com/security/cisco-secures-iot-keeping-security-closer-to-networking Cisco secures IoT keeping security closer to networkingThe use of IoT devices in enterprises is growing exponentially A critical concern is deploying IoT devices without requisite security controls Being a leader in both security and networking Cisco continues to bring security closer to networking 2023-02-06 13:00:56
Cisco Cisco Blog The Power of Relationships: Executive Buy-In and Security Culture for Bolstering Resilience https://blogs.cisco.com/security/the-power-of-relationships-executive-buy-in-and-security-culture-for-bolstering-resilience The Power of Relationships Executive Buy In and Security Culture for Bolstering ResilienceFindings from Cisco s Security Outcomes Report spotlight the importance of executive buy in and a security culture in bolstering resilience 2023-02-06 13:00:50
海外TECH CodeProject Latest Articles Wexstream - Video Conferencing Platform with Node.js, React and Jitsi https://www.codeproject.com/Articles/5353196/Wexstream-Video-Conferencing-Platform-with-Node-js jitsi 2023-02-06 13:24:00
海外ニュース Japan Times latest articles Philippines set to send two robbery suspects to Japan on Tuesday https://www.japantimes.co.jp/news/2023/02/06/national/crime-legal/philippines-detainees-repatriate/ fujita 2023-02-06 22:16:23
ニュース BBC News - Home Prepayment meters: Magistrates told to stop allowing forced installations https://www.bbc.co.uk/news/business-64542229?at_medium=RSS&at_campaign=KARANGA install 2023-02-06 13:28:49
ニュース BBC News - Home Nicola Bulley: Private divers join missing dog walker search https://www.bbc.co.uk/news/uk-64534135?at_medium=RSS&at_campaign=KARANGA lancashire 2023-02-06 13:33:21
ニュース BBC News - Home Huge quake toppled buildings in Turkey and Syria as people slept https://www.bbc.co.uk/news/world-europe-64533851?at_medium=RSS&at_campaign=KARANGA rescuers 2023-02-06 13:18:15
ニュース BBC News - Home Turkey earthquake: Screaming, shaking... how it felt when the quake hit https://www.bbc.co.uk/news/world-64537446?at_medium=RSS&at_campaign=KARANGA screaming 2023-02-06 13:39:55

コメント

このブログの人気の投稿

投稿時間:2021-06-17 05:05:34 RSSフィード2021-06-17 05:00 分まとめ(1274件)

投稿時間:2021-06-20 02:06:12 RSSフィード2021-06-20 02:00 分まとめ(3871件)

投稿時間:2020-12-01 09:41:49 RSSフィード2020-12-01 09:00 分まとめ(69件)