IT |
気になる、記になる… |
Western Digital、「Xbox Series X|S」用ストレージ拡張カード「WD_BLACK C50 Xbox用拡張カード」を発売 |
https://taisy0.com/2023/06/06/172683.html
|
microsoft |
2023-06-06 14:58:36 |
IT |
気になる、記になる… |
Apple、米国で学生・教職員向けの「Back to School」キャンペーンを開始 |
https://taisy0.com/2023/06/06/172679.html
|
apple |
2023-06-06 14:00:37 |
AWS |
AWS Partner Network (APN) Blog |
Building Secure Private Connectivity with AWS PrivateLink for TiDB Cloud |
https://aws.amazon.com/blogs/apn/building-secure-private-connectivity-with-aws-privatelink-for-tidb-cloud/
|
Building Secure Private Connectivity with AWS PrivateLink for TiDB CloudTiDB is an advanced open source distributed SQL database with elastic scaling efficient query processing for mixed workloads and always on performance With AWS PrivateLink customers can connect their VPC to TiDB Cloud services on AWS as if they were in their own VPCs without requiring the extra security measure associated with VPC peering Learn how to use AWS PrivateLink to build trusted and secure private connectivity between your data and TiDB Cloud |
2023-06-06 14:58:41 |
AWS |
AWS Partner Network (APN) Blog |
Ingesting Different Sensor Type Data in a Digital Twin with AWS IoT Core |
https://aws.amazon.com/blogs/apn/ingesting-different-sensor-type-data-in-a-digital-twin-with-aws-iot-core/
|
Ingesting Different Sensor Type Data in a Digital Twin with AWS IoT CoreThe Internet of Things IoT is a fast growing and innovative area that enables AWS customers to support a wide variety of use cases IoT customers can also stream sensor data into a data lake where insights can be gathered by leveraging AWS machine learning services Learn how Noser Engineering helped a customer build a general digital twin platform that is capable of adapting to rapid changes in the twined building through the integration of many different sensor types |
2023-06-06 14:50:51 |
AWS |
AWS Partner Network (APN) Blog |
How Drata’s Continuous Compliance Solution Helps SaaS Providers Streamline Compliance on AWS |
https://aws.amazon.com/blogs/apn/how-drata-continuous-compliance-solution-helps-saas-providers-streamline-compliance-on-aws/
|
How Drata s Continuous Compliance Solution Helps SaaS Providers Streamline Compliance on AWSLearn how Drata s suite of continuous automated compliance solutions can help accelerate SaaS providers journey to compliance frameworks These solutions allow customers such as SaaS providers to monitor their diverse workload spread across multiple accounts and customize the controls they need to apply for their chosen compliance framework and any of the other frameworks to which Drata has mapped their controls |
2023-06-06 14:07:46 |
AWS |
AWS Partner Network (APN) Blog |
Effortless Onboarding and Modern Safety Features for SaaS on AWS with Katanemo |
https://aws.amazon.com/blogs/apn/effortless-onboarding-and-modern-safety-features-for-saas-on-aws-with-katanemo/
|
Effortless Onboarding and Modern Safety Features for SaaS on AWS with KatanemoExplore how Katanemo s powerful identity and fine grained permissions system enables developers to effortlessly onboard customers and build modern safety features for their SaaS applications on AWS To accompany this blog you can read additional posts and guides by Katanemo on how tenants can quickly set up SSO and how developers can build ABAC authorization via Tags and meet compliance requirements via access logs APIs |
2023-06-06 14:03:59 |
python |
Pythonタグが付けられた新着投稿 - Qiita |
AtCoder ABC 304 C - Virus を PyPy3とPythonでDFS, BFS, Union-Find, (ダイクストラ法) などで解く |
https://qiita.com/recuraki/items/256dedfcb0f5b7561ad9
|
atcoderabccvirus |
2023-06-06 23:51:14 |
python |
Pythonタグが付けられた新着投稿 - Qiita |
電子書籍をPDF化 |
https://qiita.com/momiji777/items/2674ce8ef3a0230ea31b
|
書き込み |
2023-06-06 23:32:46 |
AWS |
AWSタグが付けられた新着投稿 - Qiita |
【コスト削減】AWS EC2インスタンス 夜間休日自動停止方法 (5) 結局どの方法が一番よさそう? のまとめ |
https://qiita.com/mksamba/items/64ead59e8b3c99e41bc5
|
自動 |
2023-06-06 23:31:10 |
AWS |
AWSタグが付けられた新着投稿 - Qiita |
📜Private Diary【初めてインターネットサーバーを作りました】 |
https://qiita.com/PB-193/items/10be939153aa63774ae5
|
privatediary |
2023-06-06 23:31:09 |
AWS |
AWSタグが付けられた新着投稿 - Qiita |
【コスト削減】AWS EC2インスタンス 夜間休日自動停止方法 (4) AWS Instance Scheduler |
https://qiita.com/mksamba/items/d4d8eeb1200562d5de23
|
awsinstancescheduler |
2023-06-06 23:18:02 |
AWS |
AWSタグが付けられた新着投稿 - Qiita |
【コスト削減】AWS EC2インスタンス 夜間休日自動停止方法 (3) Amazon EventBridge Scheduler |
https://qiita.com/mksamba/items/8a5073a4440a54907d08
|
amazon |
2023-06-06 23:11:22 |
golang |
Goタグが付けられた新着投稿 - Qiita |
BigQueryで使用するテーブルスキーマのJSONを作成 |
https://qiita.com/taniko/items/23e41118b3ff9f9e063b
|
typebigquerystringfi |
2023-06-06 23:53:20 |
海外TECH |
MakeUseOf |
4 Ways Virtual Reality Is Bad for You |
https://www.makeuseof.com/ways-virtual-reality-bad-for-you/
|
effects |
2023-06-06 14:46:19 |
海外TECH |
MakeUseOf |
How to Create Subtitles in Kdenlive: 2 Techniques |
https://www.makeuseof.com/kdenlive-how-to-create-subtitles/
|
kdenlive |
2023-06-06 14:30:19 |
海外TECH |
MakeUseOf |
Best Gadgets for Adults With ADHD in 2023 |
https://www.makeuseof.com/best-gadgets-for-adults-with-adhd/
|
adults |
2023-06-06 14:30:19 |
海外TECH |
MakeUseOf |
5 States Where Owning an EV Might Prove Challenging |
https://www.makeuseof.com/least-ev-friendly-us-states/
|
challengingsome |
2023-06-06 14:20:18 |
海外TECH |
MakeUseOf |
How to Fix the “Semaphore Timeout Period Has Expired” Error 0x80070079 in Windows 11/10 |
https://www.makeuseof.com/semaphore-timeout-period-expired-0x80070079/
|
message |
2023-06-06 14:15:17 |
海外TECH |
DEV Community |
Budibase vs Superblocks: Which one is better for your business? |
https://dev.to/illa/budibase-vs-superblocks-which-one-is-better-for-your-business-2mgm
|
Budibase vs Superblocks Which one is better for your business As the demand for low code platforms continues to rise Superblocks and Budibase have emerged as strong contenders in the market In this extensive blog post we will delve into the similarities and differences between Superblocks and Budibase as integration options for ILLA Cloud Additionally we will introduce ILLA Cloud an innovative low code platform that empowers businesses to build robust internal tools with ease and efficiency Introduction to BudibaseBudibase is a low code platform that empowers businesses to create custom web applications quickly and efficiently With its user friendly interface and powerful features Budibase simplifies the application development process for both technical and non technical users Key Features and Advantages of Budibase Drag and Drop Interface Budibase offers a visual drag and drop interface that allows users to design and customize their web applications with ease No coding skills are required making it accessible to a wide range of users Database Management Budibase provides robust database management capabilities allowing users to create and manage their databases effortlessly The platform supports various database systems including MySQL and PostgreSQL Customizable Templates Budibase offers a collection of customizable templates that serve as a starting point for application development Users can choose from a range of templates and tailor them to their specific requirements saving time and effort Collaboration Tools Budibase includes collaboration features that enable multiple team members to work together on application development Users can collaborate in real time share feedback and track project progress fostering efficient teamwork Scalability Budibase is designed to scale with the growing needs of businesses It can handle projects of any size from small prototypes to large scale enterprise applications Budibase s Market Position and Success Stories As a rising player in the low code development space Budibase has gained recognition for its intuitive interface and powerful capabilities It has attracted clients from various industries including startups SMBs and enterprise level organizations Understanding the Target Audience of Budibase Budibase caters to a wide range of users including developers citizen developers and business professionals Developers can leverage Budibase s advanced features and customization options while citizen developers and business professionals can build applications without extensive coding knowledge It is particularly suitable for teams and organizations seeking to streamline their application development processes and increase productivity In summary Budibase offers a user friendly and versatile low code platform with features like a drag and drop interface robust database management customizable templates collaboration tools and scalability Its market position is growing and it caters to a diverse target audience making it a promising choice for businesses looking to accelerate their application development efforts Overview of SuperblocksSuperblocks is a low code development platform that simplifies the process of building applications It offers a comprehensive set of tools and features that enable developers to create robust and scalable applications without the need for extensive coding knowledge In this section we will explore the key features and benefits of Superblocks its use cases in various industries and its unique selling points Key Features and BenefitsSuperblocks provides developers with a visual development environment and a wide range of features to streamline the application development process Some key features and benefits of Superblocks include Drag and Drop Interface Superblocks offers an intuitive drag and drop interface allowing developers to build applications by simply dragging and connecting components This user friendly interface eliminates the need for manual coding making it accessible to both experienced developers and citizen developers Component Library Superblocks comes with an extensive library of pre built components and templates ranging from UI elements to complex functionality modules This library allows developers to rapidly assemble applications by leveraging these pre built components saving time and effort in the development process Integration Capabilities Superblocks seamlessly integrates with various external services and APIs enabling developers to leverage the functionalities of popular tools and services within their applications This integration capability enhances the versatility and functionality of the applications built on Superblocks Workflow Automation Superblocks offers a powerful workflow automation system that allows developers to automate repetitive tasks and streamline complex business processes This feature improves efficiency and productivity freeing up developers time to focus on more critical aspects of application development Use Cases and Industries Where Superblocks ExcelsSuperblocks finds application in a wide range of industries and use cases including E commerce Superblocks enables the development of e commerce platforms with features like product catalogs shopping carts and payment integrations Healthcare Superblocks facilitates the development of healthcare applications such as patient management systems appointment scheduling and medical record management Education Superblocks can be used to build educational platforms with features like course management student enrollment and online learning modules Financial Services Superblocks enables the development of financial applications including banking systems investment platforms and transaction management solutions Highlighting Superblocks Unique Selling PointsSuperblocks offers several unique selling points that set it apart from other low code development platforms Extensive Customization Superblocks provides developers with the flexibility to customize their applications according to their specific requirements Developers can easily modify the appearance functionality and behavior of components to create tailored solutions Scalability and Performance Superblocks is designed to handle large scale applications and high user loads It employs advanced optimization techniques to ensure optimal performance and scalability making it suitable for applications with growing user bases Collaboration and Teamwork Superblocks offers collaborative features that allow multiple developers to work together on a single project It provides version control team based permissions and real time collaboration facilitating efficient teamwork and project management In conclusion Superblocks is a powerful low code development platform that empowers developers to build applications quickly and efficiently With its drag and drop interface extensive component library integration capabilities and workflow automation Superblocks offers a versatile solution for various industries and use cases Its customization options scalability and collaboration features make it a standout choice for businesses looking to streamline their application development processes Comparing Superblocks and BudibaseCriteriaSuperblocksBudibaseUser Experience and Interface DesignSuperblocks offers a modern and intuitive interface with a drag and drop builder and a clean design Users can easily navigate and customize their applications Budibase provides a user friendly interface with a visual builder and a sleek design It offers a seamless experience for both technical and non technical users simplifying the application development process Available Integrations and External Services SupportSuperblocks supports a wide range of integrations and external services including databases APIs and third party tools It allows seamless connectivity to various platforms and systems Budibase offers integration capabilities with popular services and tools allowing users to connect their applications to external services easily While the range of integrations is not as extensive as Superblocks Budibase provides essential integration options for most common use cases Customization and FlexibilitySuperblocks provides extensive customization options allowing users to tailor their applications to specific requirements Users can add custom code create custom components and apply advanced styling Budibase offers a decent level of customization enabling users to modify their applications using CSS and JavaScript While it may not offer the same level of flexibility as Superblocks it provides sufficient customization capabilities for most applications Collaboration and Teamwork FeaturesSuperblocks offers collaboration features including role based access control version control and the ability to work on projects simultaneously Users can collaborate effectively and track project changes Budibase provides collaboration capabilities that allow team members to collaborate on application development It supports multi user editing comments and project sharing facilitating teamwork and communication Pricing and Cost ConsiderationsSuperblocks offers a range of pricing plans including free and paid options The paid plans offer additional features and higher usage limits The pricing is transparent and caters to different user needs and budgets Budibase offers flexible pricing plans including a free tier and paid options The paid plans provide advanced features and increased usage limits The pricing is competitive and suitable for individuals teams and organizations of different sizes Performance and ScalabilitySuperblocks ensures high performance and scalability allowing applications to handle a large number of users and data It utilizes modern technologies and cloud infrastructure to deliver optimal performance Budibase is designed to deliver good performance and scalability for most applications It utilizes efficient coding practices and provides optimization options to enhance application performance It can handle moderate to high user loads effectively Real World Examples and Case StudiesSuperblocks has a collection of real world examples and case studies showcasing successful applications built on the platform These examples highlight the platform s capabilities and demonstrate its effectiveness in various industries and use cases Budibase features a range of case studies and success stories that demonstrate the platform s versatility and effectiveness These examples showcase how Budibase has been used to build successful applications across different industries and business sectors Introducing ILLA CloudILLA Cloud is a cutting edge low code platform that revolutionizes the way businesses build applications With its powerful features and user friendly interface ILLA Cloud empowers users to create robust and scalable applications with ease Let s explore the key features and advantages of ILLA Cloud its target audience and its unique approach to low code development Key Features and Advantages of ILLA Cloud Drag and Drop Interface ILLA Cloud provides a visual drag and drop interface that simplifies the application development process Users can easily design and customize their applications by dragging and dropping components eliminating the need for complex coding Seamless Integration ILLA Cloud offers seamless integration with various data sources APIs and third party services Users can connect their applications to databases external systems and popular services enabling data flow and enhancing functionality Powerful Workflow Automation ILLA Cloud includes a robust workflow automation engine that allows users to streamline their business processes From simple task automation to complex workflows ILLA Cloud enables users to automate repetitive tasks and improve efficiency Scalability and Performance ILLA Cloud ensures scalability and high performance for applications built on the platform With cloud infrastructure and optimized coding practices applications can handle increasing user demands without compromising performance Target Audience and Use Cases for ILLA Cloud ILLA Cloud caters to a wide range of users including Business Professionals Non technical users who need to build internal tools automate processes and streamline workflows without extensive coding knowledge IT Teams Developers and IT professionals who want to accelerate application development and deliver solutions faster Startups and Small Businesses Organizations with limited resources that require cost effective and efficient application development solutions ILLA Cloud s Approach to Low Code Development ILLA Cloud adopts a user centric approach to low code development It aims to empower users by providing a platform that combines simplicity and flexibility While offering a visual interface for rapid application development ILLA Cloud also allows users to extend functionality with custom code and integrations providing a balance between ease of use and flexibility With ILLA Cloud users can build applications tailored to their unique requirements while leveraging the power of low code development Whether it s creating internal tools automating workflows or developing customer facing applications ILLA Cloud offers a comprehensive solution that accelerates the application development process and drives business growth ConclusionIn conclusion Superblocks and Budibase both offer compelling features and advantages as low code platform solutions However when it comes to integrating with ILLA Cloud it is crucial to assess your organization s specific requirements and goals With its advanced functionalities seamless integration capabilities and user friendly interface ILLA Cloud stands out as the ideal low code platform for building internal tools By harnessing the power of ILLA Cloud alongside the robust functionalities of Superblocks and Budibase businesses can unlock unprecedented levels of productivity and innovation in their development processes Embrace the boundless potential of low code development with ILLA Cloud and its integration options for a transformative application development experience Join our Discord Community discord com invite illacloudTryILLA Cloud for free cloud illacloud comILLA Home Page illacloud comGitHub page github com illacloud illa builderSource ILLA Cloud x Hugging Face use AI Model with Low Code About ILLA ILLA ILLA Cloud Accelerate your internal tools development ILLA Cloud Product Information Latest Updates and Reviews How to Automate Tasks with ILLA Cloud Superblocks Overview Build AI powered Apps with GPT Superblocks secures M to help companies build and maintain internal apps About ILLA ILLA Budibase Build internal tools in minutes the easy way GitHub Budibase budibase Low code platform for creating internal Budibase Overview no code tools I actually use and love as a developer |
2023-06-06 14:49:20 |
海外TECH |
DEV Community |
Exploring Angular Signals |
https://dev.to/oz/exploring-angular-signals-14le
|
Exploring Angular SignalsIt s not a comprehensive guide and all you need to know at least because Angular Signals are not completely released yet we are still waiting for input and model functions but I ll share what I ve learned after some weeks of extensive research What are we going to explore signal computed effect toSignal toObservable support of signals in the templates That s part of Angular Signals API that we can already try ️What can Angular Signals give us The most important thing is the new way of detecting changes in the templates In the articles about Angular Signals you ll often see parts about Change Detection and there is a reason for that A simple example lt ul ngIf isLoading gt lt li ngFor let item of items gt item lt li gt lt ul gt In this template we have some bindings when isLoading or items are modified DOM should be modified also The question is how Angular can know that bindings were modified There are ways to do this ZoneJS dirty checking ChangeDetectionStrategy Default Observables async pipe ChangeDetectionStrategy OnPush Signals The code of our example will work with the first default option With observables amp OnPush lt ul ngIf isLoading async gt lt li ngFor let item of items async gt item lt li gt lt ul gt With signals lt ul ngIf isLoading gt lt li ngFor let item of items gt item lt li gt lt ul gt That s the gist of it Signals are a way of notifying Angular that some part of the page should be modified It s their most important task their main usage and they are promised to be the most effective in this In a signals only Angular application we can remove ZoneJS and enjoy pure and granular change detection but for that all the libraries you use in your templates should also use only signals in their templates That s why Angular will support the existing change detection for a very long time and that s why you should not worry about the changes it s absolutely safe to just leave your existing code as is APIsignal creates a writeable signal Supposed to be used in the code where you are going to write into this signal directly They are not supposed to be exposed as part of the public API of your service or component If your component has its own local store in a separate class then it s ok to declare some signal containing fields as public to let your component write to the signal directly it s the same as patching or updating the state of ComponentStore or RxState In shared stores a k a global stores and feature stores it s better to hide them behind getters and setters or actions or effects Otherwise they ll become just a bunch of global variables writeable by anyone For example if isLoading field will be writeable by any part of your code there are high chances to create an infinite spinner signal reveals the most important thing about Signals they always have a value You can not create a signal and assign a value later It also means that if you need some source of data that will be produced later you need an Observable not a Signal Of course you can use undefined as an initial value and only react to the value that is not undefined but you ll have to return some value anyway as a result your template will just receive undefined If your code expects some time related asynchronous sources of data observables will be much more convenient DOM events XHR requests user s input you can easily debounce concatMap take skip forkJoin them cancel requests with switchMap If your source of data can not answer the question What is the current value right now without any delay then it can not be presented as a Signal Signals shine in a different field representation of the application s state And it s quite an important role computed creates a readonly derived signal from other signals My favorite part of the Angular Signals It creates a readonly signal which value will be recalculated every time its value is requested not on every change of the signals If signals inside the function were not modified then the previous result of the computation will be returned The most amazing feature of computed it doesn t allow modifications of signals in its scope Of course there are ways to turn this protection off but at least this function encourages you to create a declarative reactive system computed expects that computation will be lightweight and quick and will cause no side effects Don t modify any variables here not only signals but any variables outside of the function Don t modify the DOM don t toggle flags don t record values and don t run asynchronous tasks Quite often you will use the result of one computed in a few other computed this reason alone is enough to follow all the limitations of computed effect is a weapon of the last resort It will run its function at least once but not instantly read more about it in this article effect will also run it when signals unwrapped in that function are modified with the same memoization as in computed Can be created only in an injection context or in any context if an Injector is provided Inside the effect you are allowed to make dirty things change the state imperatively modify the DOM manually and even run asynchronous code although it s the most filthy thing because effect can not track values of the signals unwrapped in the asynchronous code If you need you need to use effect try to find a way to don t use it Only when all attempts are failed use effect It makes your code imperative less reliable and more fragile It s too easy to create endless loops and non expected side effects here by default writing to signals inside effect is not allowed but It can be turned off easily and most of the users will just add allowSignalWrites true to quickly remove an error Side effects in an asynchronous code will not be tracked setTimeout again to your service Because this protection is so easy to break unintentionally somewhere deep in the stack of the called functions effect should only be used when there is no other way In the Angular source code effect is not even part of the Signals it s located in the renderer folder Because Angular has to modify the DOM it s the framework s responsibility Your code should modify the DOM by updating the bindings in the templates Angular will listen to their changes and then will modify the DOM That s the idiomatic way toSignal converts an Observable into a Signal Requires an injection context or an injector and instantly subscribes to the given observable Subscription is quite an important thing for observables so you should be sure that subscription will not cause undesired side effects and will be actually used without subscribing just in case Can be called in an injection context or if an Injector is provided This function might create an illusion that you can just wrap your observables with toSignal and forget about the difference But the truth remains the same Signals should always be able to return their current value while Observable might produce it asynchronously It s easier to update some signal in the observable itself this way observable remains an Observable signal remains a Signal toObservable creates a Signal from an Observable Uses effect under the hood therefore requires an injection context or an Injector This function is more useful Signals can be read at any moment without causing any side effects so you can convert some of your signals to use them in your observables Of course you can just read the signals in the code of your observables but when you need to react to the changes of a Signal it s quite handy to use an observable created from a signal In Angular v we ll get input and model Creating new Components using SignalsThe best way to create a new component is to start from the template Create a template declare what bindings you need and start implementing them as signals Some of them will be computed signals you ll see how handy is computed for the templates If your thinking process will go this way you ll create a declarative system Usage of computed will encourage you to avoid imperative pitfalls You ll also notice how easy it is to use signals in the templates that signals are very good for simple and synchronous reactivity and that observables are still needed for non trivial asynchronous tasks and any tasks involving network requests Here I ll answer some questions frequently asked in streams and podcasts ️Will Signals replace NgRx As a big fan of NgRx and a person who thinks that questions like this reveal and spread ungratefulness I can honestly say that for very simple components you can indeed replace ComponentStore with a class with signals You could do it with the famous class with a BehaviorSubject approach but there were two very good reasons to use ComponentStore instead select and effect But now computed can replace selectors and all you ll need is a replacement for effect And if you are used to working with NgRx Store with actions then Signals simply can t replace it out of the box You could of course create some mini library but it s much more reliable to simply keep using NgRx Store you can even use signal based stores now ️Yay no more RxJS As explained above observables will remain in your code You might not need async pipe anymore and you might move most of your code to Signals but there still will be cases where observables are more suitable Even in simple and small applications Also it doesn t mean that you now don t need to know a thing about observables and just subscribe is all you need you ll need observables not only for simple XHR requests but also for more complicated things And asynchronous code just can not be simple It s better to read some articles watch some courses and resolve this issue once and forever Beginners will since v start with signals first and their learning curve is significantly less steep They will meet the observables just a little bit later when their code will start serving real life needs Should we start rewriting our app No Signals are completely opt in Your code will keep working for the foreseeable future as the Angular team said There are thousands of Angular apps in Google they simply can t rewrite them all so the Angular team has no plans to deprecate currently existing components With or without signals the biggest benefit you can get right now is the refactoring itself during the refactoring you ll overhaul the code and fix some issues here and there it will bring the biggest value If you already use OnPush strategy and async pipe you ll get no performance benefits from switching to signals If you use Default change detection strategy then you have a very good reason to start refactoring and practicing signals If we will use only signal based components in our new application what are the benefits Theoretically you can get rid of ZoneJS and the performance of your application will be better than OnPush async In practice all the libraries you use should also use signal based templates only But it will happen someday so it s better to prepare your app and start using only signals in the templates of the new components apps Granular reactivity is another benefit only part of your template will be checked and updated The current plan is to do it per view Here you can read what is View in a component I hope that some of your questions about Angular Signals are now answered If you have more ask them right here or on Twitter |
2023-06-06 14:37:46 |
海外TECH |
DEV Community |
What are your software development principles? |
https://dev.to/sherrydays/what-are-your-software-development-principles-1451
|
anything |
2023-06-06 14:31:12 |
海外TECH |
DEV Community |
Security headers - what they are and how to use them 🔒 |
https://dev.to/mylesb93/security-headers-what-they-are-and-how-to-use-them-2nmg
|
Security headers what they are and how to use them I was recently tasked with improving the security rating on one of our websites This involved a couple of things but the thing I want to focus on in this post is security headers We scanned the site here and were initially given a rating of E Not good So one of the recommendations was to add security headers which are headers contained in the HTTP response and can provide various different security benefits such as only allowing iFrame s from specified sites to be embedded on your site or ensuring your browser is only accessed via HTTPS By adding some of these headers we were able to raise the security rating to an A There are various ways you can add these headers depending on your server setup but the most straightforward is adding them in a htaccess file Security Headers lt IfModule mod headers c gt Header set Strict Transport Security max age includeSubDomains lt IfModule gt In this example we re adding the Strict Transport Security header which as mentioned previously ensures your site can only be accessed via HTTPS Here are some specific examples X Content Type OptionsPrevents the browser from doing what s known as MIME type sniffing which is when the browser tries to figure out the content type by looking at the content of a resource rather than looking at the Content Type header nosniff is the only possible value that this header can be set to X Frame OptionsSpecifies whether or not your site can be embedded inside an iFrame on other sites Examples of possible values DENY gt Ensures the site can t be displayed in an iFrameSAMEORIGIN gt The site can be displayed in an iFrame if all ancestor frames are from the same origin of the siteReferrer PolicySpecifies how much information should be contained in the Referrer header e g do we want the entire path of the referrer to be shown Examples of possible values origin gt Only the origin is shown in the Referrer header e g if the referrer is then only is shown in the Referrer header same origin gt Only show the referrer for same origin requests when we re being referred from the same site Strict Transport SecurityEnsures your website can only be served over HTTPS Examples of possible values max age lt expire time gt gt How long in seconds that the browser remembers to serve the site over HTTPSincludeSubDomains gt Whether this header should also apply to subdomains e g Content Security PolicyA list of rules known as a policy that apply to specified domains to protect against certain types of attacks e g Cross Site Scripting For example you can set script src which will ensure that only scripts from can be run on your site There s a lot you can do here which you can find out about here If you ve done everything correctly then you should be able to see your header by viewing the network tab in your browser of choice Hopefully you found that useful and if so feel free to drop a comment below and find me on Twitter |
2023-06-06 14:26:25 |
海外TECH |
DEV Community |
The experience of being a maintainer—in their words |
https://dev.to/tidelift/the-experience-of-being-a-maintainer-in-their-words-2alf
|
The experience of being a maintainerーin their wordsIn late Tidelift fielded its second survey of open source maintainers Hundreds of maintainers responded with thoughts about getting paid for their work the security and maintenance practices they have in place for their projects and where they need help most along with a host of other interesting insights In this post we share the last of eleven key findings If you don t want to wait for the rest of the results you can download the full survey report right now Some of the most impactful findings in our survey come not from charts and graphs but directly from the words of maintainers From general opinions on the maintainer experience to thoughts on the state of open source now and in the future the maintainers we surveyed were not shy to tell us their thoughts Here are a few unfiltered insights On the relationship between open source and corporate users“If you asked me this years ago I might have something inspiring to say but now that open source has won it feels like we re just giving away our work to companies who profit from it “It seems like companies are starting to understand how much they rely on OSS and are becoming more willing to contribute back where they think it could help the projects they depend on remain in a state that enables the use they depend on “Funding for part and full time OSS contributors and maintainers is our biggest barrier right now We re very happy to put in the work so to speak in order to earn that funding but outside of one corporate sponsor I have not found a good way of funding our OSS projects “I have a business built to support the OSS projects I have that are used by very large companies It would be nice if the culture in OSS shifted such that companies saw value in paying to support OSS projects they depend on “Recently the security side of things stream of CVEs vuln reports has been a major stress factor there are skewed incentives in reporting potential vulnerabilities leading to pressure from scared users for maintainers to do essentially all the work validating disputing findings and either fix the issue if valid or debunk with lots of effort if invalid the report On the impact of open source and being a part of it“Open source is providing the tools and protocols that currently power and will continue to power the software we use now and into the foreseeable future Being a part of that and helping shape both the status quo and the next generation of applications is hugely rewarding “Endless possibilities of creation even simpler work due to a myriad of tools and significant improvements of platforms like GitHub “In a negative way I fear that open source is a huge attack surface for malware and malicious actors “Each day we see more and more open source alternatives that are better than their commercial closed source equivalents “I m excited that the biotech and pharma industries are beginning to see the value of open source scientific software and contribute to it “I believe in the tenets of free softwareーI believe that this approach to software is the only viable way for the world of computing to thrive I enjoy being part of that future “Not all employers make things that matter to me or the wider world Work is very limited Being able to start something is important since I am able to work on things that make my life better and in turn share them with others “ Open source allows me to work on a large project I could never do by myself even if I was paid for it It lets me outsource knowledge and effort to people that know more than I do about various parts of the project I think finding ways to enable people to contribute in ways like that to projects that can get a lot of use is exciting to me “Open source is changing not only development practices but also transforms business expectations in other industries On the challenges of being a maintainer“If I got paid enough money to quit my day job to work on OSS full time I d love love love that Things would get done so much faster on my library etc But alas I m well paid at my job and like the lifestyle that being well paid affords And even if I could find a benefactor that d pay me as much or more than my job currently pays such an individual could at that point have an undue influence “I feel the visibility of big projects are amplified but the work of small but often essential maintainers is not recognized frustrated “Hopefully keeping some of the remote friendly virtual things we ve learned over the pandemic so far to better enable people from systemically under represented regions in the world and shift the balance of power away from the global North West and the white cis male dominated North America sector of the industry Things like Outreachy having a cohort right now with significant representation from African countries “Open source has been established as a mainstream thing and that helps Tidelift GitHub Sponsors and other efforts could pave the way for actual independent paid for OSS maintenance outside of benevolent employment companies that subside OSS by employing maintainers for non related work “I feel like not having enough time to implement all the ideas I have is leading me to getting burned out I have a lot of ideas that I keep thinking about all the time but I don t have time to implement them “I am paid well enough for my job so I don t do it for the money just for the sheer pleasure of sharing what I make…Although truthfully I might feel different if I wasn t paid as well as I am Selflessness can only take you so far if you can t afford to buy shiny toys once in a while So there you have it what it is like to be a maintainer today from the mouths of maintainers themselves And with that we conclude our second Tidelift open source maintainer survey We hope you found these insights valuable If you d like to get future survey results like these as we get them please give us a follow and we look forward to sharing more with you soon We hope you found some useful and actionable information in this blog post To read the previous ten other findings download the full survey results today and watch our webinar where resident data nerd Chris Grams unveils the top findings from the survey |
2023-06-06 14:02:00 |
Apple |
AppleInsider - Frontpage News |
New 15-inch MacBook Air vs 13-inch MacBook Air M2: Compared |
https://appleinsider.com/inside/macbook-air/vs/new-15-inch-macbook-air-vs-13-inch-macbook-air-m2-compared?utm_medium=rss
|
New inch MacBook Air vs inch MacBook Air M ComparedApple has introduced a new model of MacBook Air at WWDC with a inch MacBook Air now a larger option for consumers Here s how the specs differ from the existing inch model inch MacBook Air left inch MacBook Air right WWDC is often the venue of new Mac launches and for that involved supersizing the MacBook Air While Apple has offered a inch MacBook Air for quite some time it now has a inch version in its catalog Read more |
2023-06-06 14:07:14 |
海外TECH |
Engadget |
The best multi-device wireless chargers for 2023 |
https://www.engadget.com/best-multi-device-wireless-chargers-130020900.html?src=rss
|
The best multi device wireless chargers for There s a good chance you have enough devices with wireless charging support that a single device pad or stand just won t cut it However buying a multiple item wireless charger can be a headache You not only have to contend with varying levels of support but different designs as well ーthe last thing you want is something that won t fit on your nightstand While this space can be confusing there are plenty of options out there that are worth your money We ll walk you through what you need to know while shopping for a multi device wireless charger and recommend a few models that belong on your short list Future proofingIt won t be shocking to hear that your smartphone choice influences your choice in a wireless charger Only iPhone owners will need to consider Apple Watch compatibility Likewise you ll need an Android phone if you expect to power a Galaxy Watch Buy an iPhone or newer and you can attach your phone magnetically using MagSafe while the latest Android phones often have some form of fast wireless charging However it s not simply a question of getting the fastest charger You should consider what you might buy in the future Don t buy a two device charger if you have an iPhone and AirPods but have been eyeing an Apple Watch And if you think you might switch to Android or vice versa you ll want to get something more generic that doesn t lock you into any one ecosystem Some chargers include cradles trays and other features that are heavily optimized for particular products and might not even account for year to year changes Some vertical stands are too tall for small phones like the iPhone mini for instance While you can never completely guarantee that next year s phone or watch will work it s worth buying something more likely to last Having said all this don t be afraid to get a charger with vendor specific features if you re fiercely loyal to one brand Apple isn t expected to ditch MagSafe any time soon and Samsung will likely keep making Galaxy Watches for a while to come Where and how will you use it Sebastian Bednarek on UnsplashYou re probably buying a multi device wireless charger with one location in mind It might sit on your nightstand or on your desk Not everyone buys a charger just for themselves though you might want to use one as a shared station for you and a partner If the charger will sit on your nightstand you ll likely want a compact stable unit that won t swallow all your free space or tumble to the floor You may also prefer a lay flat phone pad so your screen is less likely to keep you awake The Apple Watch and some other smartwatches can double as tiny alarm clocks so you might want a vertical charging option for any wristwear At a desk however you may want a vertical phone stand so you can check notifications Will the charger sit on a low table Horizontal charger pads may make it easier to grab your devices in a hurry Travel chargers should fold up or otherwise protect the pads while they re in your bag And yes aesthetics count You may want something pretty if it s likely to sit in a posh room where guests will see it If it s a shared charging station you ll want something with multiple generic surfaces and you ll probably have to forgo charging more than one watch at a time In those cases consider the handful of in wireless chargers on the market or models with USB ports PerformanceIt s no secret that wireless charging is typically slower than wired and powering multiple devices adds a new wrinkle As these chargers often have to support a wide range of hardware you ll have to forget about the fastest device specific options from brands like Google OnePlus and Samsung That s not to say these will be slow but there just isn t much separating them on the charging speed front As a general rule the quickest multi device chargers tend to top out at W for phones And you ll need an Apple MagSafe charger if you want to get that full W on an iPhone It s rare that you ll find a truly slow example mind you Even some of the most affordable options we ve seen will recharge your phone at a reasonable W or W and the W for other devices is more than enough If you re only docking overnight or while you work speed won t make a huge difference Just be sure that whatever you buy is powerful enough for a phone in a case It s also worth noting that fast charging for other devices is rare although you ll occasionally find speedier options for the Apple Watch Series Quality box contents and small detailsMelvin Thambi on UnsplashThe difference between a good charger and a great one often boils down to little details You won t always need to pay extra to get those but a larger outlay may be worthwhile to avoid frustrations for years to come A textured surface like rubberized plastic or fabric will reduce the chances your expensive gadgets will slide off their charging points The base should have enough grip and weight that the charger won t easily shift out of place Any floating or vertical stands should be sturdy ーsteer clear if there s any wobble You ll also want to make a note of what s included in the box Some chargers don t ship with power adapters and we ve seen numerous models whose Apple Watch “stands are merely holders for your existing charging puck Then there s helpful touches like status lights for confirming correct placement although you ll want to make sure they dim or shut off after a certain amount of time And while it s still true that cradles and trays can limit compatibility you do want your devices to stay where you put them Shelves and lips can prevent your phone or watch from sliding Oh and be wary of floating smartwatch mounts as heavier timepieces might sag Best premium in charger Belkin BoostCharge Pro in Wireless Charging Pad with MagSafeIt doesn t get much better than Belkin s most advanced model of wireless charger if you re an Apple devotee The high quality BoostCharge Pro in pad offers W MagSafe charging for your iPhone fast charging for the Apple Watch and a space for AirPods Pro or other earbuds with Qi compatible cases The base is weighty covered in rubberized plastic and includes a discreet status light for your earbuds More importantly it supports more devices than you might think Although the Pro pad uses MagSafe the horizontal layout lets you charge virtually any phone at reduced speeds We also have to give Belkin kudos for one of the most convenient Apple Watch chargers we ve seen It not only works horizontally and vertically but includes a knob to adjust for different sizes and third party cases This is quite large compared to some in chargers so it s not the greatest choice for a nightstand Consider the smaller footprint of its counterpart the BoostCharge Pro in Wireless Charger with MagSafe W if you have an iPhone or newer You also won t find USB ports and the indented earbud pad rules out a second phone Still it s easily worth the asking price Runner up in Logitech Powered in DockThere are many quality high end chargers to choose from but Logitech s Powered in Dock offers a few features that help it rise above It consumes relatively little space and the rubberized horizontal and vertical chargers deliver up to W while gripping your devices tightly so both you and your partner can top off It has a few limitations though The vertical stand isn t well suited to the iPhone mini and other small phones And while the floating stand works with most Apple Watches heavier ones tend to sag such as this author s steel Series with a Leather Link strap and might not charge properly If those aren t issues though your will be well spent Best budget in charger Anker Wireless ChargerYou can find plenty of more affordable in chargers Few however offer quite as much for the money as the Anker Wireless Charger in Stand It offers an adjustable angle W vertical stand and lets you charge an Apple Watch either horizontally or vertically There s also a W USB C power adapter in the box so you won t have to buy an aftermarket brick or rely on proprietary cabling to get started The limitations mostly stem from the cost cutting measures You probably won t have room for a second phone And like some chargers we ve seen the Apple Watch mount is a bring your own cable affair that only supports older USB A connections The included cable with your Series or SE won t work here At though this in wireless charging stand is a good bargain Another good option Otterbox in Charging Station for MagSafeIf you re willing to spend a bit more and live in Apple s universe the Otterbox in Charging Station for MagSafe is worth your attention The extremely small footprint of this wireless charger is ideal for nightstands You can tuck a trio of your phone earbuds and Apple Watch into an area normally reserved for a single device The company supplies a surprisingly powerful W USB C power adapter in the box that serves as a fast wired option in a pinch The caveats are clear The floating MagSafe stand rules out Android phones and older iPhones You ll need to bring your own Apple Watch cable and the USB A port won t work with the USB C cables bundled with newer watches The horizontal only watch mount also rules out clock functionality The overall balance of space and utility is still difficult to top for Best in charger Mophie Dual Wireless Charging PadThe in field is highly competitive and makes it difficult to choose an absolute winner However Mophie s Dual Wireless Charging Pad hits many of the right marks It can charge two devices at up to W each making it a great pick for a two phone household The fabric surface with rubberized trim should keep your gadgets steady and the status lights will confirm accurate placement There s even a USB A port to plug in your watch charger or any other wired hardware The complaints are few You won t charge at W and we d rather have USB C than USB A It s nonetheless a safe choice at and worth buying over less expensive options Runner up in Samsung Super Fast Wireless Charger DuoMulti device chargers from phone manufacturers tend to be either compromised or highly proprietary but Samsung s Super Fast Wireless Charger Duo sometimes known as the W Duo Fast Wireless Charger bucks that trend It s compact and delivers high speed charging for one phone and an accessory whether it s a Samsung Galaxy Watch or another manufacturer s earbuds The status lights will even dim at night and change color to indicate when your batteries are full This won t help for two phone households and Samsung only guarantees W charging for some of its own phones the Galaxy Note Galaxy S and later You ll also want to be mindful of which version you buy as there are variants with and without a power adapter in the box Neither is cheap at respective prices of and This remains an elegant charger for nightstands and travel though and the pads are sufficiently device agnostic Best charger for two people Mophie in Wireless Charging MatThere are few wireless chargers built with more than one person in mind but Mophie s in Wireless Charging Mat is the most well rounded of the bunch The pad can handle up to four devices wirelessly at W including two phones and two accessories There s also a spare USB A port for charging earlier Apple Watch models using the included mount and your own cable or wired items A fabric surface subtle device trays and indicator lights will also take the mysteries out of charging This is a giant charger compared to most and you might find it limiting if your home has more than one Apple Watch or accessories that won t fit the smaller charging pads Even so Mophie is offering considerable value for The in does more than some in chargers at that price and it doesn t suffer the compatibility issues of rivals like Nomad s Base Station Pro This article originally appeared on Engadget at |
2023-06-06 14:48:02 |
海外TECH |
Engadget |
Apple's iOS 17 expands protection against unsolicited nudes |
https://www.engadget.com/apples-ios-17-expands-protection-against-unsolicited-nudes-142425558.html?src=rss
|
Apple x s iOS expands protection against unsolicited nudesApple s iOS makes it easier to share content but it also has new safeguards to prevent abuses of that newfound power The company has revealed that its upcoming software will add a Sensitive Content Warning feature that helps adults avoid unsolicited nude photos and videos If you receive something potentially concerning you can either decline it agree to see it or learn about ways to get help Communication Safety also protects kids beyond the Messages app The feature will use machine learning to detect and blur sexually explicit material sent and received through AirDrop Contact Posters FaceTime messages and the Photos picker The technology can now recognize videos in addition to still shots If this content arrives children can message trusted adults for help or find useful resources Both Sensitive Content Warning and Communication Safety process media on device Apple also says it doesn t have access to the material Communication Safety requires that you enable Family Sharing and mark certain accounts as belonging to children Apple unveiled its plans to curb unsolicited nudes in alongside a plan to flag photos uploaded to iCloud when they contained known child sexual abuse material CSAM The company scrapped this plan at the end of amid concerns governments could pressure it to scan for other image types not to mention risks of false positives Communication Safety and Sensitive Content Warning don t have those issues ーthey re only meant to prevent creeps from traumatizing others Legislators have aimed to criminalize unwanted nudes and individual services have their own anti nude detection tools In that light Apple is mainly filling gaps in the deterrence system In theory shady characters won t have much success blasting iPhone users with rude texts and calls This article originally appeared on Engadget at |
2023-06-06 14:24:25 |
海外TECH |
CodeProject Latest Articles |
Property-based Tests and Clean Architecture are Perfect Fit |
https://www.codeproject.com/Articles/5362221/Property-based-Tests-and-Clean-Architecture-are-Pe
|
domain |
2023-06-06 14:12:00 |
ニュース |
BBC News - Home |
Ferrier suspended from Commons over Covid rule breach |
https://www.bbc.co.uk/news/uk-scotland-65702252?at_medium=RSS&at_campaign=KARANGA
|
constituency |
2023-06-06 14:12:12 |
ニュース |
BBC News - Home |
PGA Tour and LIV Golf agree merger to end split in golf |
https://www.bbc.co.uk/sport/golf/65825327?at_medium=RSS&at_campaign=KARANGA
|
arabian |
2023-06-06 14:57:43 |
ニュース |
BBC News - Home |
Watch: Building floats along flooded Dnipro river |
https://www.bbc.co.uk/news/world-europe-65825444?at_medium=RSS&at_campaign=KARANGA
|
river |
2023-06-06 14:47:31 |
ニュース |
BBC News - Home |
'Thicko, cheat, underage drinker' - Key extracts from Prince Harry's statement |
https://www.bbc.co.uk/news/uk-65819707?at_medium=RSS&at_campaign=KARANGA
|
gathering |
2023-06-06 14:23:09 |
ニュース |
BBC News - Home |
French Open 2023 results: Elina Svitolina booed after losing to Aryna Sabalenka in Paris |
https://www.bbc.co.uk/sport/tennis/65820023?at_medium=RSS&at_campaign=KARANGA
|
French Open results Elina Svitolina booed after losing to Aryna Sabalenka in ParisElina Svitolina accuses Belarusian Aryna Sabalenka of inflaming the situation after the Ukrainian is booed for not shaking hands at the French Open |
2023-06-06 14:32:35 |
コメント
コメントを投稿