投稿時間:2023-06-14 20:38:14 RSSフィード2023-06-14 20:00 分まとめ(41件)

カテゴリー等	サイト名等	記事タイトル・トレンドワード等	リンクURL	頻出ワード・要約等/検索ボリューム	登録日
IT	ITmedia 総合記事一覧	[ITmedia ビジネスオンライン] GPT普及の陰で新たなセキュリティリスク　GMOイエラエが診断サービス開始	https://www.itmedia.co.jp/business/articles/2306/14/news053.html	itmedia	2023-06-14 19:40:00
IT	ITmedia 総合記事一覧	[ITmedia News] 「サーバー最強！」ツイートのReebok、ジャニーズコラボであえなく撃沈　社長「万全のつもりだった」	https://www.itmedia.co.jp/news/articles/2306/14/news203.html	itmedia	2023-06-14 19:21:00
TECH	Techable（テッカブル）	NFT自販機が三軒茶屋・秋葉原に登場！仮想通貨不要、300円でデジタルアートをGET	https://techable.jp/archives/211592	artdass	2023-06-14 10:00:37
IT	情報システムリーダーのためのIT情報専門サイト IT Leaders	三井住友ファイナンス＆リース、社内の問い合わせ対応をチャットボットで省力化、10カ月で3万件超の問い合わせに応答 | IT Leaders	https://it.impress.co.jp/articles/-/24956	三井住友ファイナンスリース、社内の問い合わせ対応をチャットボットで省力化、カ月で万件超の問い合わせに応答ITLeaders三井住友ファイナンスリースSMFL、本社東京都千代田区は、社内からの問い合わせに対応する業務を省力化することを目的に、AIチャットボットを全社に導入した。	2023-06-14 19:32:00
python	Pythonタグが付けられた新着投稿 - Qiita	【Paiza問題集】配列メニュー/【配列の検索】何個ある?	https://qiita.com/amron/items/7307c1331e07b6149209	paiza	2023-06-14 19:00:25
Ruby	Rubyタグが付けられた新着投稿 - Qiita	配列メソッドまとめ	https://qiita.com/riffiy/items/b3a7391208da7dca0548	array	2023-06-14 19:28:36
Ruby	Rubyタグが付けられた新着投稿 - Qiita	RubyでAtCoder ABC243(A, B, C)を解いてみた	https://qiita.com/shoya15/items/7ef9b550d41127e93765	atcoder	2023-06-14 19:10:05
AWS	AWSタグが付けられた新着投稿 - Qiita	Transite Gateway のベストプラクティス TGWアタッチメント専用サブネットについて整理する	https://qiita.com/akis1215/items/51c885a47e37ef312e16	gateway	2023-06-14 19:40:23
golang	Goタグが付けられた新着投稿 - Qiita	【前編】goa@v3とDDDでWebAPI ~DSLを書こう~	https://qiita.com/tigercat1124/items/50299433f7422e59a322	webapi	2023-06-14 19:26:39
Ruby	Railsタグが付けられた新着投稿 - Qiita	配列メソッドまとめ	https://qiita.com/riffiy/items/b3a7391208da7dca0548	array	2023-06-14 19:28:36
技術ブログ	Mercari Engineering Blog	メルコイン決済基盤における分散トランザクション管理	https://engineering.mercari.com/blog/entry/20230614-distributed-transaction/	hellip	2023-06-14 10:00:55
技術ブログ	Developers.IO	AWS Support Automation Workflows（SAW）Runbook が 70個に増えていた！ とっておきの SAW と出会えるかもしれない！	https://dev.classmethod.jp/articles/ssm-saw-runbook-list-20230614/	awssystemsmanager	2023-06-14 10:25:40
海外TECH	MakeUseOf	How to Enable End-to-End Encryption in Android's Messages App	https://www.makeuseof.com/how-to-enable-end-to-end-encryption-in-android-messages/	android	2023-06-14 10:16:18
海外TECH	DEV Community	How To Secure Your JavaScript Applications	https://dev.to/devland/how-to-secure-your-javascript-applications-1pfg	How To Secure Your JavaScript ApplicationsIn one of my previous articles we explored the critical topic of avoiding security mistakes as a web developer However it is important to recognize that most security vulnerabilities in web applications do not arise simply from overlooking specific points or details It s comparable to attempting to navigate in the right direction solely by avoiding mistakes or striving to become the ideal person by avoiding any errors Unfortunately such an approach is unlikely to be consistently effective To truly enhance security it is essential to not only avoid mistakes but also take proactive measures and be prepared for the potential consequences This principle holds true for web application security as well In this post we will delve into the realm of web security where we will uncover the best practices techniques and tools that are indispensable for effectively protecting your web applications Writing a quality codeDeveloping a secure application requires attention to various aspects and one crucial aspect is writing high quality code Messy and unorganized code commonly referred to as spaghetti code can increase the likelihood of containing security issues To mitigate this risk it is important to incorporate practices that ensure code quality and security One way to achieve this is by using linting tools like ESLint or JSLint These tools automatically analyze your code for errors stylistic inconsistencies and potential security vulnerabilities By customizing the linting rules to align with coding standards and best practices you can identify and rectify potential security issues early in the development process Linting helps maintain a clean and secure codebase In addition to linting embracing code formatting practices can further enhance code quality and security Tools like Prettier simplify the task of code formatting by automatically enforcing a consistent style throughout your project If you are interested in learning more about how to use these tools for setting up your JavaScript project I recommend referring to this previous post It provides valuable insights and guidance on the topic Protect your Apps against JSON injectionInjection attacks are indeed a significant concern in web applications and JSON injection is one example of such attacks While JSON injection may not be as common or severe as other forms of injection attacks like SQL Injection it still poses a risk to the security and integrity of an application JSON injection occurs when untrusted or invalidated input is used to construct JSON documents or output messages This can lead to the alteration of the intended semantics of the JSON data and disrupt the normal execution of the program Attackers can exploit this vulnerability by injecting malicious code that can manipulate the behavior of the application in unintended ways The impact of a successful JSON injection attack can range from data loss and data modification to potential denial of service It is essential to implement proper input validation and sanitization techniques to mitigate the risk of JSON injection vulnerabilities Defend against prototype pollutionPrototype pollution is a vulnerability that can compromise the integrity of your JavaScript application Attackers manipulate an object s prototype causing unexpected behavior and potential security risks To prevent this implement these measures Input Validation Thoroughly validate and sanitize all user input that interacts with object prototypes For example if your application accepts user input to create or modify objects ensure that the input undergoes proper validation and sanitization This involves checking for malicious values or unexpected data types that could be used to manipulate the prototype chainProperty Whitelisting Establish a strict whitelist of allowed properties for objects to restrict unauthorized modifications to the prototype chain By defining the properties that can be accessed or modified you limit the potential impact of prototype pollution attacks Frequent tests for packages vulnerabilitiesWe commonly start most projects by utilizing prebuilt templates as a foundation followed by fetching necessary packages to kickstart development While this approach offers convenience and accelerates the development process it s crucial to be aware of the potential security implications associated with the packages we introduce into our projects To ensure web application security incorporate frequent vulnerability tests for relied upon packages Identify weaknesses promptly and implement these practices to enhance project security Stay Updated Keep your NPM or Yarn dependencies up to date by regularly checking for new package versions Vulnerabilities are often discovered and patched by package maintainers so updating to the latest versions helps address known security issues Use Security Tools To identify known vulnerabilities in your project s dependencies you can utilize commands like npm audit or employ third party security scanners such as DependencyCheck or Dependabot These tools thoroughly analyze the dependency tree and offer actionable insights to assist you in resolving any identified vulnerabilities Automated Testing Set up automated vulnerability testing as part of your development or continuous integration process Use tools like Snyk or other security scanners integrated into your build pipeline to automatically detect vulnerabilities Regular Updates Regularly update your project s dependencies to the latest secure versions Vulnerabilities are often patched in newer releases Implementing client and server side validationServer side validation is an often overlooked aspect of development possibly due to time constraints or other factors However it plays a crucial role in ensuring data integrity and enhancing security While client side validation provides immediate feedback to users server side validation acts as a vital safeguard against malicious or incorrect data that may bypass or manipulate client side checks To simplify the implementation of server side validation consider the following steps Verify Data Integrity Validate and sanitize all user input on the server to ensure it meets expected data types formats and constraints This helps prevent potential security threats such as SQL injection or cross site scripting XSS attacks Use Framework Validation Take advantage of server side frameworks that offer built in validation mechanisms These frameworks often provide convenient methods or libraries for validating user input efficiently Examples include Express Validator for Node js or Django Forms for Python Implement Custom Validation If your application has specific requirements or business rules consider implementing custom validation logic This allows you to perform more complex validation checks tailored to your application s needs ensuring data integrity Setting up logging and monitoringSurprisingly logging and monitoring are often neglected by many developers yet they are pivotal points that should never be ignored These essential practices are instrumental in ensuring the security and stability of your JavaScript application By capturing important events and actively tracking performance and security metrics you gain valuable insights and can swiftly respond to potential threats or incidents To get started define your logging requirements and choose a suitable logging solution that aligns with your needs Determine what events and information should be logged such as user activities or system errors and establish the desired log format for consistent analysis Implement logging mechanisms by strategically placing logging statements in your codebase capturing relevant contextual information for troubleshooting and analysis Additionally set up a monitoring system to track application health and security metrics Configure alerts to notify you of suspicious activities or anomalies that may indicate a security breach Regularly review and analyze your logs to identify patterns anomalies or security incidents allowing you to stay proactive and make necessary improvements to enhance your application s security Minify bundle and obfuscate your JavaScript codeMinifying bundling and obfuscating your JavaScript code are essential steps in protecting your application s intellectual property and enhancing its security These techniques offer several benefits including reducing code size improving performance and increasing the complexity of code analysis for potential attackers Minification involves removing unnecessary whitespace comments and reducing variable names to shorten the code This process not only improves load times but also makes it more challenging for potential attackers to analyze the code structure Bundling combines multiple JavaScript files into a single file reducing the number of requests made to the server and improving performance It also makes it harder for attackers to access individual code files as they are bundled together Obfuscation transforms the code into a more cryptic and difficult to understand form by renaming variables and functions to obscure their original purpose Indeed various tools are available to facilitate the processes of minification bundling and obfuscation in JavaScript development These tools streamline the implementation of these techniques and simplify the overall workflow Here are some commonly used tools for each process Minification UglifyJS TerserBundling Webpack Parcel RollupObfuscation JavaScript Obfuscator SummaryThis article offers practical insights and actionable steps to enhance the security of your JavaScript applications By following the recommended practices such as proper input validation minification bundling and staying updated with security measures you can effectively protect your applications from vulnerabilities and potential attacks	2023-06-14 10:39:45
海外TECH	DEV Community	Custom Plugin Development For APISIX With Lua And ChatGPT	https://dev.to/apisix/custom-plugin-development-for-apisix-with-lua-and-chatgpt-nkd	Custom Plugin Development For APISIX With Lua And ChatGPTOne of the key features of Apache APISIX is its extensibility through plugins APISIX allows you to build your own custom plugin to add extra functionalities and manage the API traffic more efficiently Oftentimes you use Lua programming language to implement new plugins or leverage plugin runners to develop plugins in your favorite programming language However APISIX has the best support for Lua After writing a couple of plugins for APISIX in Lua I understood that you do not need to know the fundamentals of Lua programming or to be an expert in this language at all when your ChatGPT friend is always with you For example with my background in Java and C I can understand the code and logic written in Lua and I believe that you can do the same This article will guide you through the process of developing a new custom plugin called file proxy for APISIX using Lua and ChatGPT We use it to write some Lua code for us This plugin will be used to expose the static files through API and fetch a file from a specified URL APISIX was built to enhance the existing functionalities of Nginx And Nginx provides a bunch of reusable Lua modules that APISIX makes use of them New file proxy plugin use caseBefore jumping into the actual plugin implementation let s understand first why we need this plugin At the time of writing this post APISIX might not provide a built in plugin for a similar case That s why we are going to build a new one Often we want to expose a static file Yaml JSON JavaScript CSS or image files through API For example APISIX API Gateway acts as a front door in your application to route incoming requests to multiple API endpoints it is the right place to define all server URLs paths parameters descriptions of each API endpoint and their inputs and outputs And you build OpenAPI specifications to document the API OpenAPI yaml file is like a map that guides your API user in understanding and interacting with your API By providing the path of openapi yaml file where it is stored in your server to the plugin you can fetch and serve the file directly through your API gateway providing a consistent interface for API consumers Then your API users can access yaml file at the specified URL There are other use cases as well you might think of using this file proxy plugin for a simple Content Delivery Network CDN replacement If you have a small scale application and don t want to use a full fledged CDN you can use the file proxy plugin to serve static files from a specific location The file proxy plugin can be used as a caching layer for files If you have files that are expensive to fetch or generate you can use the plugin to fetch the file once and then serve the cached version for subsequent requests Steps to develop the file proxy pluginWe are going to run APISIX locally and our API Gateway will be hosted on http localhost When the development is ready you can deploy it to your server or any cloud provider Basically we want to place a file openapi yaml to http localhost openapi yaml path You will learn how to achieve this PrerequisitesBefore you start it is good to have a basic understanding of APISIX Familiarity with API gateway and its key concepts such as routes upstream Admin API plugins and HTTP protocol will also be beneficial Docker is used to installing the containerized etcd and APISIX curl is used to send requests to APISIX Admin API You can also use tools such as Postman to interact with the API Understand the demo project and filesWe will leverage the existing file proxy demo project on GitHub It has a quite similar structure to the existing Apisix docker example repo only we removed unnecessary files to keep the demo simple The project has folders docker compose yml and sample openapi yaml files docker compose yml defines two containers one for APISIX and another for etcd which is configuration storage for APISIX custom plugins folder has the implementation of the file proxy plugin in Lua We review it in the following sections openapi yaml is just a sample OpenAPI specification we expose Implement file proxy pluginWe start by asking ChatGPT it gives us a guide almost close to the real implementation but the answer is too abstract and when you follow the process you will end up with a non working plugin However it helps us to extract useful Lua code If we know the real process of developing plugins it will be easier to combine both knowledge in practice Create a Lua FileWe create a new empty Lua file in the custom plugins directory of the project The name of the file should be the name of our plugin For example if your plugin is named file proxy you should create a file named file proxy lua Register the plugin in APISIXAPISIX needs to know where this plugin file is located and is able to run the plugin accordingly To do so we should first define the file path where APISIX finds file proxy lua file by adding the file path to the extra lua path attribute of APISIX in the config yaml apisix extra lua path opt lua node listen Now you may ask why the file path is set to opt lua Because we run APISIX using docker You may notice this in the docker compose yml file there are volumes  custom plugins opt apisix plugins rovolumes apisix conf config yaml usr local apisix conf config yaml ro openapi yaml usr local apisix conf openapi yaml ro custom plugins opt apisix plugins roThis mounts the local directory custom plugins where our file proxy lua file with the custom plugin implementation as a read only volume in the docker container at the path  opt apisix plugins This allows the custom plugin to be added to APISIX in the runtime to another path in Docker which is inside opt lua Similarly the other two files we copied to Docker folders Next step we enable the plugin in the APISIX plugins list This is done by adding the plugin name to the plugins list in the APISIX configuration file config yaml plugins file proxyNote that this action will override all existing default plugins specified in config default yaml You need to add manually other plugins by their name if you want to use your custom plugin with the combination File proxy plugin Lua code breakdownUp to now we only registered the plugin that simply does nothing It is time to implement it The plugin logic is implemented as Lua functions You can check how it is done in file proxy lua Let s break down the file proxy lua file to better understand the structure of the code and flow that helps you to create new plugins on your own You can simply ask ChatGPT to explain the Lua code Actually we got quite a good explanation of the code Because it was partially written by ChatGPT I will only walk you through the important parts of this code so that you are not lost or fully rely on AI to write your plugins Plugin file structureEvery plugin Lua file should have the following structure Modules You import the necessary modules libraries we need for the pluginlocal core require apisix core Plugin name Every plugin has a unique name it can be the same as our Lua file name local plugin name file proxy Plugin schema Every plugin has a plugin schema where we usually specify inputs to the plugin The input we will pass from the APISIX route configuration which you can see later when we test the plugin For the file proxy plugin the plugin needs a file path to read the file and return a response so our parameter is the path which string type You understand the schema like a method declaration with params in other programming languages local plugin schema type object properties path type string The path of the file to be served required path The path is a required field Plugin definition It is a really important part of plugin implementation that we define as a table with properties for the version priority name and schema The name and schema are the plugin s name and schema defined earlier The version and priority are used by APISIX to manage the plugin The version typically refers to the version that is currently in use like API versioning If you publish and update your plugin logic it is going to be You can set any version you wish But you need to be very careful in choosing priority The priority field defines in which order and phase your plugin should be executed For example the ip restriction plugin with a priority of will be executed before the example plugin which has a priority of This is due to the higher priority value of the ip restriction plugin If you re developing your own plugin make sure that you followed the order of plugins not to mess up the order of existing plugins You can check the order of existing plugins in the config default yaml file and open the Apache APISIX Plugin Development Guide to determine local M version priority name plugin name schema plugin schema Schema check The check schema Lua function is used to validate the plugin in a route configuration You will see it soon in the test section against the plugin schema we defined earlier Function to check if the plugin configuration is correctfunction M check schema conf Validate the configuration against the schema local ok err core schema check plugin schema conf If validation fails return false and the error if not ok then return false err end If validation succeeds return true return trueend Plugin logic access function is the core function where we can write the major plugin logic It is called during the access phase of the Nginx request processing pipeline and we control the traffic and write custom instructions For file proxy we need to open the file specified in the plugin configuration read its content and return the content as the response If the file cannot be opened it logs an error and returns a Not Found status It is the exact place we give this work to ChatGPT After we structured and refactored the code below is how it looks like function M access conf ctx Open the file specified in the configuration local fd io open conf path rb If the file is opened successfully read its content and return it as the response if fd then local content fd read all fd close ngx header content length content ngx say content ngx exit ngx OK else If the file cannot be opened log an error and return a Not Found status ngx exit ngx HTTP NOT FOUND core log error File is not found conf path error info err endend Logging logic It is always preferable to log plugin configuration so that we can debug and check if the plugin is working as we expected We can log requests to the plugin and responses Function to be called during the log phasefunction M log conf ctx Log the plugin configuration and the request context core log warn conf core json encode conf core log warn ctx core json encode ctx true end Install Apache APISIXOnce we learned how to develop our custom file proxy plugin registered in APISIX Now it is time to test the plugin You can easily install the apisix file proxy plugin demo project by running docker compose up from the project root folder after you fork clone the project Create a route with the file proxy pluginTo use and test our new file proxy plugin we need to create a route in APISIX that uses the plugin curl apisix admin routes open api definition H X API KEY eddcfffadbcf X PUT d name OpenAPI Definition desc Route for OpenAPI Definition file uri openapi yaml plugins file proxy path usr local apisix conf openapi yaml You can ask ChatGPT to explain the above configuration Test the pluginThen you can send a cURL request to the route or open the link openapi yaml in your browser The response should be the content of the file openapi yamlat the specified URL curl i openapi yamlThe plugin works as we expected With this plugin configuration you can now access any files using the specified route SummaryDeveloping custom plugins for APISIX with Lua is a powerful way to extend the functionality of the API gateway We demonstrated how to create the file proxy plugin in this post defined the plugin definition and schema validated the plugin configuration and implemented custom logic during the access and log phases of the request processing pipeline in APISIX ChatGPT helped us to write Lua code for the main functionality by filling our lacking knowledge of this programming language Happy coding Related resourcesCustom plugin development in LuaHow to Build an Apache APISIX Plugin From to Community Join the Apache APISIX Community Follow us on Twitter Find us on Slack How to contribute page About the authorFollow me on Twitter BoburUmurzokovVisit my blog  www iambobur com	2023-06-14 10:37:31
海外TECH	DEV Community	Guide des méthodes JS [chaînes de caractères]	https://dev.to/kureru/guide-des-methodes-js-chaines-de-caracteres-522c	Guide des méthodes JS chaînes de caractères Cet article recense les méthodes Javascript permettant de manipuler des chaînes de caractères les plus utilisées Si tu souhaites lire un résuméplus court je t encourage àconsulter cet article Voici la liste des méthodes mentionnées dans cet article charAt charCodeAt concat includes indexOf match repeat replace search slice split substr toLowerCase toUpperCase trim charAt DéfinitionLa méthode charAt renvoie une nouvelle chaîne de caractère contenant le caractère àl indice indiquéen argument Syntaxestr charAt indice str chaîne sur laquelle on effectue l opérationindice indice du caractère que l on souhaite récupérer ComplexitétemporelleLa complexitétemporelle de la méthode charAt est O ce qui signifie que le temps d exécution de la méthode ne dépend pas de la longueur de la chaîne Peu importe la taille de la chaîne la méthode charAt renvoie le caractère àl index spécifiéen temps constant Cas d usageAccéder au premier caractère d une chaîneconst str Hello world const firstCharacter str charAt console log firstCharacter Output H Ce code utilise charAt pour accéder au premier caractère de la chaîne str et le stocke dans la variable firstCharacter Parcourir une chaîne caractère par caractèreconst str Hello for let i i lt str length i const character str charAt i console log character Dans cet exemple nous utilisons charAt i àl intérieur d une boucle for pour parcourir chaque caractère de la chaîne str Àchaque itération le caractère àl index i est récupéréet affiché Vérifier si une chaîne contient un caractère spécifiqueconst str Hello world const index str indexOf w if index const character str charAt index console log character Output w else console log Le caractère spécifién a pas ététrouvé Dans ce cas nous utilisons indexOf w pour trouver l index de la première occurrence du caractère w dans la chaîne str Si l index est différent de cela signifie que le caractère a ététrouvé alors nous utilisons charAt index pour récupérer le caractère correspondant àcet index charCodeAt DéfinitionLa méthode charCodeAt renvoie le code Unicode d un caractère situéàun index donnédans la chaîne Le code Unicode représente un identifiant numérique unique attribuéàchaque caractère dans le système Unicode Syntaxestr charCodeAt indice str chaîne sur laquelle on effectue l opérationindice indice du caractère dont on souhaite obtenir le code Unicode ComplexitétemporelleLa complexitétemporelle de la méthode charCodeAt est O Comme pour charAt cela signifie que le temps d exécution de la méthode ne dépend pas de la longueur de la chaîne Cas d usageObtenir le code Unicode d un caractère spécifiqueconst str Hello const charCode str charCodeAt console log charCode Sortie Ce code utilise charCodeAt pour obtenir le code Unicode du premier caractère de la chaîne str Parcourir une chaîne et afficher les codes Unicode de chaque caractèreconst str Hello for let i i lt str length i const charCode str charCodeAt i console log charCode Dans cet exemple nous utilisons charCodeAt i àl intérieur d une boucle for pour parcourir chaque caractère de la chaîne str et afficher son code Unicode Vérifier si une chaîne contient un caractère spécial en utilisant son code Unicodeconst str Hello world const targetCharCode Code Unicode du point d exclamationfor let i i lt str length i const charCode str charCodeAt i if charCode targetCharCode console log Le caractère spécial a ététrouvéàl index i break Dans cet exemple nous utilisons charCodeAt i pour obtenir le code Unicode de chaque caractère de la chaîne str Nous comparons ensuite ces codes avec le code Unicode du caractère spécial recherché dans ce cas le point d exclamation pour vérifier s il est présent dans la chaîne Si nous trouvons le caractère spécial nous affichons son index et nous quittons la boucle avec break concat DéfinitionLa méthode concat est une méthode de chaîne de caractères en JavaScript qui permet de concaténer c est à dire de fusionner deux ou plusieurs chaînes en une seule chaîne Elle renvoie une nouvelle chaîne qui est le résultat de la concaténation des chaînes d origine Syntaxestr concat string string stringN str chaîne d origine àlaquelle on ajoute d autres chaînesstring string stringN la ou les chaîne s àconcaténer avec la chaîne d origine ComplexitétemporelleLa complexitétemporelle de la méthode concat dépend de la longueur totale des chaînes àconcaténer Dans le pire des cas oùla longueur totale des chaînes est grande la complexitépeut être linéaire soit O n oùn est la longueur totale des chaînes Cas d usageConcaténer deux chaînesconst str Hello const str world const concatenated str concat str console log concatenated Sortie Hello world Dans cet exemple nous utilisons concat pour concaténer les chaînes str et str en une seule chaîne qui est ensuite stockée dans la variable concatenated Concaténer plusieurs chaînesconst str Hello const str const str world const str const concatenated str concat str str str console log concatenated Sortie Hello world Dans cet exemple nous utilisons concat pour concaténer les chaînes str str str et str en une seule chaîne qui est ensuite stockée dans la variable concatenated Concaténer une chaîne avec une valeur non textuelleconst str The value is const value const concatenated str concat value console log concatenated Sortie The value is Dans cet exemple nous utilisons concat pour concaténer la chaîne str avec la valeur numérique value La méthode concat convertit automatiquement la valeur non textuelle en une chaîne avant de la concaténer avec la chaîne d origine includes DéfinitionLa méthode includes permet de déterminer si une chaîne de caractères contient une autre chaîne spécifiée Elle effectue une recherche de correspondance et renvoie un booléen indiquant si la sous chaîne est présente ou non Syntaxestr includes élémentRecherché str chaîne oùl on effectue la rechercheélémentRecherché la sous chaîne que l on cherche ComplexitétemporelleLa complexitétemporelle de la méthode includes est linéaire soit O n oùn est la longueur de la chaîne principale Cela signifie que le temps d exécution de la méthode dépend de la longueur de la chaîne sur laquelle elle est appelée Cas d usageVérifier si une chaîne contient une sous chaîneconst str Hello world const hasSubstring str includes world console log hasSubstring Sortie trueDans cet exemple nous utilisons includes pour vérifier si la chaîne str contient la sous chaîne world La méthode renvoie true car la sous chaîne est présente dans la chaîne principale Vérifier si une chaîne contient un caractère spécifiqueconst str Hello world const hasCharacter str includes o console log hasCharacter Sortie trueDans cet exemple nous utilisons includes pour vérifier si la chaîne str contient le caractère o La méthode renvoie true car le caractère est présent dans la chaîne principale Vérifier si une chaîne ne contient pas une sous chaîneconst str Hello world const hasSubstring str includes foo console log hasSubstring Sortie falseDans cet exemple nous utilisons includes pour vérifier si la chaîne str contient la sous chaîne foo La méthode renvoie false car la sous chaîne n est pas présente dans la chaîne principale indexOf DéfinitionLa méthode indexOf recherche la première occurrence d une sous chaîne dans la chaîne principale et renvoie l indice de cette occurrence Si la sous chaîne n est pas trouvée elle renvoie Syntaxestr indexOf sousChaine elementDepart str La chaîne dans laquelle on recherche la sous chaîne sousChaine chaîne que l on rechercheelementDepart facultatif L indice àpartir duquel la recherche doit commencer Par défaut la recherche commence àl indice ComplexitétemporelleLa complexitétemporelle de la méthode indexOf dépend de la longueur de la chaîne principale Dans le pire des cas oùla sous chaîne n est pas trouvée ou est située àla fin de la chaîne la complexitéest linéaire soit O n oùn est la longueur de la chaîne principale Cas d usageRechercher la première occurrence d une sous chaîneconst str Hello world const index str indexOf world console log index Sortie Dans cet exemple nous utilisons indexOf pour rechercher la première occurrence de la sous chaîne world dans la chaîne str La méthode renvoie l index qui est la position oùla sous chaîne commence dans la chaîne principale Rechercher une sous chaîne àpartir d un index spécifiqueconst str Hello world const index str indexOf o console log index Sortie Dans cet exemple nous utilisons indexOf pour rechercher la première occurrence du caractère o dans la chaîne str àpartir de l index La méthode renvoie l index qui est la position de la première occurrence du caractère o après l index spécifié Vérifier si une sous chaîne existe dans la chaîne principaleconst str Hello world const substring foo const index str indexOf substring if index console log La sous chaîne existe àl index index else console log La sous chaîne n existe pas dans la chaîne principale Dans cet exemple nous utilisons indexOf pour rechercher la première occurrence de la sous chaîne foo dans la chaîne str Si la sous chaîne est trouvée c est à dire si l index n est pas nous affichons un message indiquant l index oùla sous chaîne commence Sinon nous indiquons que la sous chaîne n existe pas dans la chaîne principale match DéfinitionLa méthode match recherche les correspondances d une expression régulière dans une chaîne de caractères et renvoie un tableau contenant les correspondances trouvées Si aucune correspondance n est trouvée la méthode renvoie null Syntaxestr match regexp str La chaîne dans laquelle on recherche les correspondances regexp une expression régulière utilisée pour rechercher les correspondances dans la chaîne ComplexitétemporelleLa complexitétemporelle de la méthode match dépend de la taille de la chaîne de caractères et de la complexitéde l expression régulière Dans certains cas la complexitépeut être élevée en particulier avec des expressions régulières complexes Dans le pire des cas elle peut avoir une complexitéexponentielle Il est important de noter que la complexitédépend de l expression régulière elle même et non de la méthode match Cas d usage Obtenir les correspondances d un motif dans une chaîne const str Hello world const matches str match o g console log matches Sortie o o Dans cet exemple nous utilisons match avec l expression régulière o g pour rechercher toutes les occurrences de la lettre o dans la chaîne str La méthode renvoie un tableau contenant les correspondances trouvées c est à dire o o Utiliser une expression régulière avec des groupes de capture const str Hello world const matches str match H w s s w console log matches Sortie Hello world Hello world Dans cet exemple nous utilisons match avec l expression régulière H w s s w pour rechercher une correspondance qui correspond àun mot commençant par H suivi de tous les caractères alphanumériques w suivi d une virgule suivie de zéro ou plusieurs espaces s suivis d un autre mot La méthode renvoie un tableau contenant la correspondance complète ainsi que les groupes de capture c est à dire Hello world Hello world Utiliser une expression régulière avec le drapeau i pour une recherche insensible àla casseconst str Hello world const matches str match WORLD i console log matches Sortie world Dans cet exemple nous utilisons match avec l expression régulière WORLD i et le drapeau i pour rechercher une correspondance insensible àla casse du mot WORLD dans la chaîne str La méthode renvoie un tableau contenant la correspondance trouvée c est à dire world repeat DéfinitionLa méthode repeat répète une chaîne de caractères un certain nombre de fois et renvoie une nouvelle chaîne contenant les répétitions Elle crée une nouvelle chaîne en concaténant la chaîne originale autant de fois que spécifié Syntaxestr repeat count str La chaîne de caractères àrépétercount Le nombre de fois que vous souhaitez répéter la chaîne Doit être un nombre entier positif ComplexitétemporelleLa complexitétemporelle de la méthode repeat est linéaire soit O n oùn est le nombre de répétitions spécifiépar le paramètre count Cela signifie que le temps d exécution de la méthode est proportionnel au nombre de répétitions Cas d usageRépéter une chaîne un nombre fixe de foisconst str Hello const repeatedStr str repeat console log repeatedStr Sortie Hello Hello Hello Dans cet exemple nous utilisons repeat pour répéter la chaîne Hello trois fois La méthode renvoie une nouvelle chaîne contenant la chaîne originale répétée c est à dire Hello Hello Hello Répéter une chaîne un nombre de fois dynamiqueconst str abc const count const repeatedStr str repeat count console log repeatedStr Sortie abcabcabcabc Dans cet exemple nous utilisons repeat pour répéter la chaîne abc un nombre dynamique de fois défini par la variable count dans ce cas La méthode renvoie une nouvelle chaîne contenant la chaîne originale répétée quatre fois c est à dire abcabcabcabc Répéter une chaîne avec un paramètre nul ou négatifconst str Hello const count const repeatedStr str repeat count console log repeatedStr Sortie Dans cet exemple nous utilisons repeat avec un paramètre count égal àzéro Comme zéro signifie qu il n y a pas de répétition la méthode renvoie une chaîne vide Si count était négatif la méthode renverrait également une chaîne vide replace DéfinitionLa méthode replace recherche des occurrences d une sous chaîne dans une chaîne de caractères et les remplace par une autre sous chaîne spécifiée Elle renvoie une nouvelle chaîne résultante avec les remplacements effectués Syntaxestr replace chaineARemplacer nouvelleChaine str La chaîne de caractères dans laquelle on effectue les remplacementschaineARemplacer La sous chaîne que vous souhaitez rechercher et remplacer nouvelleChaine La sous chaîne qui va remplacer les occurrences trouvées Il est également possible d utiliser une expression régulière comme searchValue pour effectuer des remplacements plus complexes ComplexitétemporelleLa complexitétemporelle de la méthode replace dépend de la taille de la chaîne de caractères et de la complexitéde la recherche et du remplacement effectués Dans la plupart des cas la complexitéest linéaire soit O n oùn est la longueur de la chaîne de caractères Cependant lorsqu une expression régulière est utilisée pour la recherche la complexitépeut varier en fonction de la complexitéde l expression régulière elle même Cas d usage Remplacer une occurrence spécifique dans une chaîne const str Hello World const newStr str replace World Universe console log newStr Sortie Hello Universe Dans cet exemple nous utilisons replace pour rechercher la première occurrence de la sous chaîne World dans la chaîne str et la remplacer par la sous chaîne Universe La méthode renvoie une nouvelle chaîne contenant les remplacements c est à dire Hello Universe Utiliser une expression régulière pour effectuer des remplacements globauxconst str Hello Hello Hello const newStr str replace Hello g Hi console log newStr Sortie Hi Hi Hi Dans cet exemple nous utilisons replace avec l expression régulière Hello g pour rechercher toutes les occurrences de la sous chaîne Hello dans la chaîne str et les remplacer par la sous chaîne Hi En utilisant le drapeau g de l expression régulière tous les Hello sont remplacés La méthode renvoie une nouvelle chaîne avec les remplacements effectués c est à dire Hi Hi Hi Utiliser une fonction de remplacement dynamiqueconst str Hello World const newStr str replace World match gt match toUpperCase console log newStr Sortie Hello WORLD Dans cet exemple nous utilisons replace pour rechercher la sous chaîne World dans la chaîne str et effectuer un remplacement dynamique àl aide d une fonction de rappel La fonction de rappel reçoit en argument la correspondance trouvée et nous l utilisons pour convertir la correspondance en majuscules àl aide de la méthode toUpperCase La méthode renvoie une nouvelle chaîne avec les remplacements effectués c est à dire Hello WORLD search DéfinitionLa méthode search recherche une correspondance entre une expression régulière et une chaîne de caractères renvoyant l index de la première occurrence de la correspondance Syntaxestr search expressionReguliere str La chaîne de caractères sur laquelle on effectue la recherchechaineARemplacer La sous chaîne que vous souhaitez rechercher et remplacer expressionReguliere Une expression régulière pour spécifier le motif àrechercher ComplexitétemporelleLa complexitétemporelle de la méthode search dépend de la complexitéde l expression régulière fournie Dans le pire des cas la complexitépeut être linéaire en fonction de la taille de la chaîne et de l expression régulière Cas d usageRechercher la position d un mot dans une chaîneconst str Hello world Welcome to JavaScript const position str search world console log position Output Dans cet exemple search world recherche le mot world dans la chaîne str et renvoie l index de la première occurrence trouvée qui est Utiliser une expression régulière pour la rechercheconst str Hello world Welcome to JavaScript const position str search w w i console log position Output Ici nous utilisons une expression régulière w w i pour rechercher le premier mot commençant par w indépendamment de la casse dans la chaîne str La méthode search renvoie l index de la première occurrence du mot correspondant qui est Vérifier la présence d un motif dans une chaîneconst str Hello world Welcome to JavaScript const pattern javascript i if str search pattern console log Le motif JavaScript a ététrouvé else console log Le motif JavaScript n a pas ététrouvé Dans cet exemple nous utilisons une expression régulière javascript i pour rechercher le mot JavaScript indépendamment de la casse dans la chaîne str Si la méthode search renvoie une valeur différente de cela signifie que le motif a ététrouvéet nous affichons un message correspondant slice DéfinitionLa méthode slice extrait une partie d une chaîne de caractères et renvoie une nouvelle chaîne contenant cette portion Elle prend en compte les index de début et de fin spécifiés permettant de délimiter la portion àextraire Syntaxestr slice début fin str La chaîne sur laquelle on effectue l extraction début L index de départ de la portion àextraire Si début est négatif il est traitécomme str length début oùstr length est la longueur de la chaîne fin Optionnel L index de fin de la portion àextraire non inclus Si fin est négatif il est traitécomme str length fin ComplexitétemporelleLa complexitétemporelle de la méthode slice est linéaire en fonction de la taille de la portion extraite Dans le pire des cas si la portion extraite est la chaîne d origine la complexitéserait linéaire par rapport àla taille de la chaîne Cas d usageExtraire une sous chaîne d une chaîneconst str Hello world const subStr str slice console log subStr Output world Dans cet exemple slice extrait la portion de la chaîne str comprise entre les index et est exclu La sous chaîne extraite est world Utiliser des indices négatifs pour extraire une portion depuis la finconst str Hello world const subStr str slice console log subStr Output world Ici slice extrait la portion de la chaîne str comprise entre les derniers caractères et l avant dernier caractère La sous chaîne extraite est toujours world Extraire une portion jusqu àla fin de la chaîneconst str Hello world const subStr str slice console log subStr Output world Dans cet exemple slice extrait la portion de la chaîne str àpartir de l index jusqu àla fin de la chaîne La sous chaîne extraite est world split DéfinitionLa méthode split divise une chaîne de caractères en utilisant un séparateur spécifiéet renvoie un tableau de sous chaînes Le séparateur peut être un caractère une sous chaîne ou une expression régulière Les portions de la chaîne entre les occurrences du séparateur sont extraites en tant qu éléments du tableau résultant Syntaxestr split séparateur limite str La chaîne àdiviser séparateur Le séparateur utilisépour diviser la chaîne Il peut être un caractère une sous chaîne ou une expression régulière Si aucun séparateur n est spécifié la méthode renverra un tableau contenant la chaîne entière comme seul élément limite Optionnel Un entier indiquant le nombre maximum de divisions àeffectuer Si cette limite est atteinte les éléments restants sont ajoutés tels quels dans le tableau résultant Si limite est négatif aucune limite ne sera appliquée ComplexitétemporelleLa complexitétemporelle de la méthode split dépend de la taille de la chaîne d entrée et du séparateur utilisé Dans le pire des cas la complexitépeut être linéaire par rapport àla taille de la chaîne Cas d usageDiviser une chaîne en fonction d un séparateurconst str Hello world const result str split console log result Output Hello world Dans cet exemple split divise la chaîne str en utilisant la virgule suivie d un espace comme séparateur Le tableau résultant contient les sous chaînes Hello et world Diviser une chaîne en utilisant une expression régulièreconst str Hello world const result str split o console log result Output Hell w rld Ici split o divise la chaîne str en utilisant une expression régulière qui correspond àla lettre o ou àla virgule Le tableau résultant contient les sous chaînes Hell w et rld Limiter le nombre de divisions effectuéesconst str Hello world how are you const result str split console log result Output Hello world how Dans cet exemple split divise la chaîne str en utilisant la virgule suivie d un espace comme séparateur et limite le nombre de divisions à Le tableau résultant contient les trois premières sous chaînes obtenues substr DéfinitionLa méthode substr extrait une sous chaîne àpartir d une chaîne de caractères en utilisant un index de départ et une longueur spécifiée Elle renvoie la sous chaîne extraite sans modifier la chaîne d origine Syntaxestr substr indexDépart longueur str La chaîne àpartir de laquelle extraire la sous chaîne indexDépart L index de départ àpartir duquel extraire la sous chaîne Si indexDépart est négatif il est traitécomme longueur de la chaîne indexDépart Par exemple correspond àl index du dernier caractère longueur Optionnel La longueur de la sous chaîne àextraire Si longueur est omis ou dépasse la longueur de la chaîne la méthode extraira la sous chaîne jusqu àla fin de la chaîne ComplexitétemporelleLa complexitétemporelle de la méthode substr est linéaire par rapport àla longueur de la sous chaîne extraite Dans le pire des cas la complexitépeut être proportionnelle àla longueur de la chaîne d origine Cas d usageExtraire une sous chaîne àpartir d un index de départconst str Hello world const result str substr console log result Output world Dans cet exemple substr extrait une sous chaîne de str àpartir de l index correspondant au caractère w jusqu àla fin de la chaîne Le résultat est la sous chaîne world Extraire une sous chaîne avec une longueur spécifiéeconst str Hello world const result str substr console log result Output Hello Ici substr extrait une sous chaîne de str àpartir de l index jusqu àune longueur de caractères Le résultat est la sous chaîne Hello Utiliser un index de départ négatif const str Hello world const result str substr console log result Output world Dans cet exemple substr extrait une sous chaîne de str àpartir de l index calculéen traitant comme longueur de la chaîne indexDépart ce qui correspond àl index du caractère w Le résultat est la sous chaîne world toLowerCase DéfinitionLa méthode toLowerCase convertit tous les caractères d une chaîne de caractères en minuscules Elle ne modifie pas la chaîne d origine mais renvoie une nouvelle chaîne avec les caractères en minuscules Syntaxestr toLowerCase str La chaîne de caractères àconvertir en minuscules ComplexitétemporelleLa complexitétemporelle de la méthode toLowerCase dépend de la longueur de la chaîne d origine En général elle est linéaire ce qui signifie que la complexitéest proportionnelle àla longueur de la chaîne Cas d usageConvertir une chaîne en minusculesconst str Hello World const result str toLowerCase console log result Output hello world Dans cet exemple toLowerCase convertit tous les caractères de la chaîne str en minuscules produisant la nouvelle chaîne hello world Comparaison de chaînes insensible àla casseconst str Hello const str hello const areEqual str toLowerCase str toLowerCase console log areEqual Output trueIci toLowerCase est utilisépour convertir les deux chaînes str et str en minuscules avant de les comparer Cela permet de comparer les chaînes de manière insensible àla casse et dans cet exemple les deux chaînes sont considérées comme égales Validation d une entrée utilisateurconst userInput Mercredi const lowerCaseInput userInput toLowerCase if lowerCaseInput mercredi console log L utilisateur a entréMercredi else console log L utilisateur n a pas entréMercredi Dans ce cas toLowerCase est utilisépour convertir l entrée utilisateur en minuscules permettant de faire une comparaison insensible àla casse Si l utilisateur entre mErCreDi ou Mercredi la condition sera vraie et le message appropriésera affiché toUpperCase DéfinitionLa méthode toUpperCase convertit tous les caractères d une chaîne de caractères en majuscules Elle ne modifie pas la chaîne d origine mais renvoie une nouvelle chaîne avec les caractères en majuscules Syntaxestr toUpperCase str La chaîne de caractères àconvertir en majuscules ComplexitétemporelleLa complexitétemporelle de la méthode toUpperCase dépend de la longueur de la chaîne d origine En général elle est linéaire ce qui signifie que la complexitéest proportionnelle àla longueur de la chaîne Cas d usageConvertir une chaîne en majusculesconst str Hello World const result str toUpperCase console log result Output HELLO WORLD Dans cet exemple toUpperCase convertit tous les caractères de la chaîne str en majuscules produisant la nouvelle chaîne HELLO WORLD Comparaison de chaînes insensible àla casseconst str HELLO const str hello const areEqual str toUpperCase str toUpperCase console log areEqual Output trueIci toUpperCase est utilisépour convertir les deux chaînes str et str en majuscules avant de les comparer Cela permet de comparer les chaînes de manière insensible àla casse et dans cet exemple les deux chaînes sont considérées comme égales Validation d une entrée utilisateurconst userInput motdepasse const upperCaseInput userInput toUpperCase if upperCaseInput MOTDEPASSE console log L utilisateur a entrémotdepasse en majuscules else console log L utilisateur n a pas entrémotdepasse en majuscules Dans ce cas toUpperCase est utilisépour convertir l entrée utilisateur en majuscules permettant de faire une comparaison insensible àla casse Si l utilisateur entre MotDePasse ou MOTDEPASSE la condition sera vraie et le message appropriésera affiché trim DéfinitionLa méthode trim supprime les espaces en début et en fin d une chaîne de caractères Les espaces àl intérieur de la chaîne ne sont pas affectés La méthode trim est souvent utilisée pour nettoyer les entrées utilisateur en éliminant les espaces inutiles Syntaxestr trim str La chaîne de caractères ànettoyer en supprimant les espaces en début et en fin ComplexitétemporelleLa complexitétemporelle de la méthode trim dépend de la longueur de la chaîne d origine En général elle est linéaire ce qui signifie que la complexitéest proportionnelle àla longueur de la chaîne Cas d usageSupprimer les espaces en début et en fin d une chaîneconst str Hello World const result str trim console log result Output Hello World Dans cet exemple trim supprime les espaces en début et en fin de la chaîne str produisant la nouvelle chaîne Hello World Comparaison de chaînes insensible aux espacesconst str Hello const str Hello const areEqual str trim str trim console log areEqual Output trueIci trim est utilisépour supprimer les espaces en début et en fin des deux chaînes str et str avant de les comparer Cela permet de comparer les chaînes de manière insensible aux espaces et dans cet exemple les deux chaînes sont considérées comme égales Nettoyage d une entrée utilisateurconst userInput Salut const cleanedInput userInput trim console log cleanedInput Output Salut Dans ce cas trim est utilisépour supprimer les espaces en début et en fin de l entrée utilisateur nettoyant ainsi la chaîne Cela permet de s assurer que la chaîne ne contient pas d espaces inutiles Et voilà nous avons terminéla liste des méthodes utiles pour manipuler les chaînes de caractère en Javascript Si vous avez appréciécet article n hésitez pas àlaisser un commentaire pour me le faire savoir	2023-06-14 10:12:50
海外TECH	DEV Community	Top 20 C# Security Interview Questions +(Answers)	https://dev.to/bytehide/top-20-c-security-interview-questions-answers-1iga	Top C Security Interview Questions Answers Welcome to this nguide on C Security Interview Questions and Answers As a developer it is crucial to understand the security aspects of the applications you build and being able to articulate your knowledge in the context of an interview can set you apart from the competition In this article we will delve into essential C security concepts and practices covering a wide range of topics and scenarios to help you confidently tackle even the most challenging security related questions in a C interview What is the difference between SecureString and String when handling sensitive data in C How does the garbage collector treat each one differently AnswerSecureString and String are two different classes in C designed for storing and manipulating text data However they have key differences when it comes to handling sensitive data SecureString This class is designed for storing sensitive data e g passwords It stores data in an encrypted format in memory ensuring that plaintext values are not accessible through memory dumps or debugging Additionally when the SecureString object is disposed the memory containing the encrypted data is immediately cleared making it difficult for an attacker to retrieve the sensitive data String The string class stores text data in plain text format and is designed for general purpose use When strings containing sensitive data are garbage collected the memory they occupied may not be immediately cleared leaving the plaintext data accessible for an attacker The garbage collector treats SecureString and String differently SecureString The garbage collector does not move or compact the memory occupied by a secure string reducing the risk of unintentional data leaks The data is encrypted in memory and it is immediately cleared when the object is disposed String The garbage collector treats string objects like any other managed object It can move and compact the memory occupied by strings and it does not ensure that plain text is immediately cleared after garbage collection Using a SecureString over a String when handling sensitive data is essential in order to minimize the possibility of exposing sensitive information in memory Explain the concept of code access security CAS in the context of C applications What are the primary advantages it offers to developers AnswerCode Access Security CAS is a security mechanism provided by the NET Framework which allows developers to define and enforce permissions for managed code at the assembly level CAS ensures that code runs with the minimum set of permissions required to perform its tasks limiting its potential damage if it were to be exploited by an attacker The primary advantages of using CAS include Fine grained control Developers can specify permissions for each assembly rather than granting broad permissions to an entire application leading to a more secure application Elevated trust Users can be confident that an application cannot perform malicious actions outside of the permissions granted to it Isolation CAS helps to isolate different parts of an application ensuring that a vulnerability in one part of the code cannot easily exploit other parts of the code Sandboxing CAS can be used to create a secure sandbox environment for running partially trusted code providing a way to execute untrusted code securely Overall CAS offers developers a more secure controlled environment to execute code while mitigating risks associated with potential security vulnerabilities Describe the purpose of the principle of least privilege and how to apply it in a C application to minimize security risks AnswerThe principle of least privilege states that any piece of code process or user should have the minimum set of privileges necessary to accomplish its tasks and nothing more The purpose of this principle is to reduce the potential damage that can be caused by a security vulnerability or malicious code To apply the principle of least privilege in a C application Limit user permissions Ensure that application users have only the permissions required to perform their tasks Do not assign overly broad or administrative permissions to application users Limit code execution privileges Apply Code Access Security CAS and restrict the permissions of assemblies Only grant the minimum set of permissions required for an assembly to function Use managed code Using managed code instead of unmanaged code can help prevent security vulnerabilities by minimizing the risk of memory corruption Restrict process privileges Run the application under an account with restricted privileges to minimize the potential damage if a security vulnerability is exploited Segregate responsibilities Design the application so that different modules or layers have separate specific tasks and grant them only the privileges required to perform those tasks Applying the principle of least privilege in a C application helps minimize security risks and ensures that if a security vulnerability or malicious code is exploited the resulting potential damage is contained Using C how do you implement digital signature verification when consuming third party APIs How does this help in ensuring secure communication with external services AnswerDigital signature verification is the process of validating the authenticity of data received from external sources by verifying that the data has been signed by a trusted party In C you can implement digital signature verification when consuming third party APIs by using cryptographic classes provided by the NET Framework such as the RSACryptoServiceProvider or DSACryptoServiceProvider Here s how you can implement digital signature verification in C Obtain the public key of the data signer which should be shared securely Convert the API response signature and data into byte arrays to be processed Create an instance of the cryptographic class e g RSACryptoServiceProvider and import the public key Use the VerifyData method of the cryptographic class to check the signature against the received data The benefits of using digital signature verification include Integrity Ensuring that the data received from the external service has not been tampered with during transit Authenticity Confirming that the data was sent by the intended party as only they possess the private key required to create the signature Non repudiation The sender cannot deny having sent the message as their digital signature is unique to them and tied to the data By implementing digital signature verification in C when consuming third party APIs you can enhance the security of communication between your application and external services How do you prevent Cross Site Scripting XSS attacks when working with C web applications What measures can you take to validate user input AnswerCross Site Scripting XSS attacks allow attackers to inject malicious scripts into a web application affecting other users who visit the affected web pages To prevent XSS attacks when working with C web applications you should follow these best practices Encode user input Encode any user input that is displayed on the web application using the HtmlEncode method from the System Web HttpUtility class or other encoding libraries This prevents potentially dangerous characters from being executed as part of a script in the user s browser string encodedUserInput HttpUtility HtmlEncode userInput Validate user input Use input validation techniques to ensure that the data received from users is in the expected format and contains no malicious content For example use regular expressions or built in validation controls to check the input for allowed patterns and characters Apply Content Security Policy CSP Implement a Content Security Policy CSP using HTTP headers to specify the allowed sources of executable scripts styles and other content This can restrict the execution of malicious scripts injected into the web application Use secure libraries and frameworks Leverage web development libraries and frameworks such as ASP NET Core which have built in XSS defenses These tools help safely render user input and can reduce the risk of introducing XSS vulnerabilities Sanitize user input If you need to allow certain HTML tags or attributes in user input use a trusted HTML sanitization library such as the HtmlSanitizer package to remove potentially dangerous content Keep software up to date Regularly update your web application libraries and dependencies to protect against known security vulnerabilities By following these best practices you can minimize the risk of XSS attacks in your C web applications and protect your users from potential security threats Now that we have discussed ways to prevent cross site scripting attacks and ensure proper input validation let s move on to explore more advanced security concepts Next we will examine how to securely establish encrypted connections using the Secure Socket Layer SSL protocol in C applications Explain how to use the Secure Socket Layer SSL protocol in C applications to establish encrypted connections with remote endpoints What key classes do you use from the NET Framework AnswerThe Secure Socket Layer SSL now called Transport Layer Security TLS is a protocol used to establish encrypted connections between clients and servers over a network To use SSL TLS in a C application you can utilize the NET Framework s SslStream class along with other networking classes like TcpClient or TcpListener Here are the key steps and classes involved in using SSL TLS in a C application Create a TcpClient or TcpListener Use the TcpClient class to connect to a remote server or the TcpListener class to listen for incoming client connections Create an SslStream Instantiate an SslStream object passing the NetworkStream obtained from the TcpClient or TcpListener as a parameter SslStream sslStream new SslStream client GetStream Authenticate the connection Call the AuthenticateAsClient or AuthenticateAsServer method on the SslStream object passing the necessary certificates and configuration options as parameters For client authentication sslStream AuthenticateAsClient remoteHostName For server authentication sslStream AuthenticateAsServer serverCertificate false SslProtocols Tls false Read and write data Use the Read and Write methods of the SslStream to securely send and receive data over the encrypted connection Close the connection Close the SslStream and the underlying TcpClient or TcpListener to terminate the connection By following these steps and using the key classes from the NET Framework you can establish secure encrypted connections between your C application and remote endpoints using SSL TLS How can you mitigate the risk of SQL injection attacks when writing data access code in C Discuss the use of parameterized queries and other best practices AnswerSQL injection attacks involve an attacker injecting malicious SQL commands into an application s database queries which can lead to unauthorized data access or manipulation To mitigate the risk of SQL injection attacks when writing data access code in C you should follow these best practices Use parameterized queries Using parameterized queries or prepared statements is the most effective way to prevent SQL injection With parameterized queries user supplied values are treated as separate parameters preventing attackers from injecting malicious SQL code For example using ADO NET and SqlCommand string query SELECT FROM Users WHERE Username username SqlCommand command new SqlCommand query connection command Parameters AddWithValue username userInput SqlDataReader reader command ExecuteReader Avoid dynamic SQL Refrain from using dynamically constructed SQL commands with user supplied data This can increase the likelihood of SQL injection vulnerabilities Use stored procedures Consider using stored procedures with input parameters which can help reduce SQL injection risks by separating the SQL query logic from the application code Escaping user input In rare cases when parameterized queries are not an option you can escape user input using proper escaping techniques specific to the SQL implementation This should be treated as a last resort as it is less secure than using parameterized queries Limit database permissions Restrict the database permissions granted to the application s database user to the minimum required for its tasks Avoid running under an administrative account or a user with elevated privileges By following these best practices you can reduce the risk of SQL injection attacks when writing data access code in C What is the purpose of compiler generated code in C How do CompilerServices and the RuntimeHelpers class help in ensuring safety and security during code execution AnswerCompiler generated code in C is code that is automatically generated by the C compiler during the compilation process to support certain language features or optimize the generated code This code is not directly written by the developer but is produced by the compiler to ensure correct behavior performance and safety at runtime The CompilerServices and RuntimeHelpers classes are part of the NET Framework and play a crucial role in ensuring safety and security during code execution CompilerServices This namespace contains types used by the C compiler to implement tasks that are not part of the C language specification but are necessary for correct code behavior performance and safety Some of these tasks include generating anonymous methods iterator blocks and dynamic method dispatch The utilization of these compiler services helps to prevent potential security vulnerabilities by ensuring that generated code conforms to the language specification and follows best practices RuntimeHelpers This class contains helper methods used by the compiler and runtime to perform low level performance critical operations Some of the methods such as InitializeArray PrepareConstrainedRegions and ExecuteCodeWithGuaranteedCleanup are used to ensure code reliability and security during runtime These methods can help prevent security vulnerabilities by ensuring that the managed code operates correctly within the runtime environment and adheres to the appropriate constraints By utilizing compiler generated code the CompilerServices namespace and the RuntimeHelpers class the C language and runtime can ensure that the generated code is safe secure and efficient during execution Discuss the role of cryptography in C security How can you securely hash encrypt and decrypt data using the NET Framework s cryptographic libraries AnswerCryptography plays a vital role in C security as it helps safeguard sensitive data ensure data integrity and authenticate communication between parties The NET Framework provides a wide range of cryptographic libraries for hashing encryption and decryption operations Hashing Hash functions are one way functions that generate a fixed size output called a hash from input data Hash functions are commonly used to ensure data integrity and store sensitive values such as passwords In NET you can use classes like SHA SHA or MD for hashing purposes using System Security Cryptography byte data Encoding UTF GetBytes Sensitive data using SHA sha SHA Create byte hash sha ComputeHash data Encryption Encryption is the process of converting readable data plaintext into unreadable data ciphertext using an encryption algorithm and a secret key In NET you can use encryption algorithms provided by the System Security Cryptography namespace such as AES DES or TripleDES using System Security Cryptography byte data Encoding UTF GetBytes Sensitive data byte key new byte bit key using Aes aes Aes Create aes KeySize aes Key key aes GenerateIV using ICryptoTransform encryptor aes CreateEncryptor byte encrypted encryptor TransformFinalBlock data data Length Decryption Decryption is the process of converting encrypted data ciphertext back into its original readable form plaintext using a decryption algorithm and the secret key used during encryption Decryption can be performed using the same cryptographic classes as encryption using System Security Cryptography byte encryptedData Encrypted data byte key The same key used for encryption using Aes aes Aes Create aes KeySize aes Key key aes GenerateIV using ICryptoTransform decryptor aes CreateDecryptor byte decrypted decryptor TransformFinalBlock encryptedData encryptedData Length By using the cryptographic libraries provided by the NET Framework you can securely hash encrypt and decrypt data in your C applications enhancing the security of sensitive information and communication Describe the concept of a sandbox in the context of C applications How does a sandboxed environment help in mitigating security risks AnswerA sandbox in the context of C applications is a restricted environment in which code is executed with limited permissions resources and privileges The primary purpose of using a sandbox is to isolate potentially untrusted or insecure code limiting the potential damage it can cause in case of a security vulnerability or malicious behavior A sandboxed environment helps mitigate security risks by Isolation Separating potentially untrusted code from the rest of the application ensuring that vulnerabilities in the sandboxed code do not compromise the entire application Limited permissions Running code with the minimum set of permissions required for its tasks preventing malicious code from performing actions outside of its intended scope Resource constraints Restricting the resources available to the sandboxed code such as memory or CPU usage to prevent the code from consuming excessive system resources and negatively affecting the overall performance of the application Monitoring and control Allowing developers to monitor the activities of sandboxed code and terminate it if any suspicious or malicious behavior is detected By using a sandboxed environment in C applications developers can mitigate security risks associated with third party libraries plug ins or other untrusted code sources protecting their applications from potential vulnerabilities and malicious attacks So far we have touched on various aspects of C security including the principles of least privilege sandboxing and managing user identities As we progress through this article we will shift our focus to examine the tools and techniques that the NET Framework provides for detecting and responding to potential security threats in a C application How can you use the System Diagnostics namespace to detect and respond to potential security threats in a C application AnswerThe System Diagnostics namespace provides various classes and tools that allow developers to monitor debug and profile C applications These tools can also be utilized to detect and respond to potential security threats Here are some ways to use the System Diagnostics namespace to enhance security in a C application Event logging Use the EventLog class to write security related events such as user login attempts to the Windows event log Monitoring and analyzing these events can help detect potential security threats such as brute force attacks or unauthorized access using System Diagnostics EventLog WriteEntry ApplicationName User logged in EventLogEntryType Information Performance counters Use performance counters to monitor the resource usage and performance of your C application Creating and monitoring custom performance counters can help detect potential security threats such as a denial of service attack or unexpected resource consumption due to malicious code Debugging and diagnostics Utilize the Debug and Trace classes to create diagnostic messages and assertions throughout your application code These messages can help you identify potential security vulnerabilities during development and testing Process monitoring Use the Process class to monitor the running processes in your application s environment This can help detect potential security threats such as unauthorized processes or unexpected resource consumption Using the System Diagnostics namespace effectively for monitoring profiling and debugging your C application can help detect and respond to potential security threats making your application more secure and resilient Explain the security implications of using reflection and dynamic code generation in C What precautions should you take when working with these techniques AnswerReflection and dynamic code generation in C provide powerful capabilities for inspecting metadata invoking members and generating code at runtime However these techniques introduce potential security risks due to their powerful capabilities flexibility and potential to bypass compile time security checks Some security implications when using reflection and dynamic code generation include Bypassing access controls Reflection can potentially access private and protected members which could lead to unauthorized access or manipulation of sensitive data Tampering with internals Malicious code could use reflection to modify the internal state or behavior of an application leading to unexpected or insecure behavior Loading malicious assemblies Reflection can be used to load and execute untrusted or malicious assemblies which could compromise the security of an application Dynamic code generation Generating and executing code at runtime can introduce security vulnerabilities if not adequately controlled as it allows the possibility of executing unverified or malicious code To maintain security while using reflection and dynamic code generation in C you should follow these precautions Limit the use of reflection Minimize the use of reflection in your application using it only when necessary to achieve specific functionality Verify and validate input Ensure that input used in reflection operations is verified and validated preventing an attacker from manipulating your application by supplying unexpected or malicious input Apply Code Access Security CAS Use CAS to limit the permissions of the assemblies that involve reflection preventing potential misuse of reflection capabilities Use strong name signing Sign your assemblies with strong names to ensure their integrity and authenticity This can help prevent unauthorized modification or replacement of your assemblies Secure code generation When using dynamic code generation validate and sanitize user input and follow secure coding practices Ensure that dynamically generated code is secure and trustworthy before executing it By following these precautions you can mitigate the security risks associated with using reflection and dynamic code generation in your C applications while still benefiting from their powerful capabilities Describe the purpose of the Common Language Runtime CLR security attribute classes in C How can they help in enforcing security policies at runtime AnswerThe Common Language Runtime CLR security attribute classes in C are used to apply security attributes to your NET assemblies and types These security attributes allow developers to define security policies and permissions for their code which are enforced by the CLR at runtime CLR security attribute classes can help enforce security policies at runtime in the following ways Declarative security Security attributes are applied directly to the assembly type or method using C attributes Declarative security allows the CLR to enforce security policies before executing the code enabling the ability to prevent unauthorized access or execution Some examples of declarative security attributes include PermissionSet SecurityAction Demand Name FullTrust PrincipalPermission SecurityAction Demand Role Administrator Imperative security Security attributes can be applied imperatively in code using the Demand Assert Deny or PermitOnly methods of security attribute classes Imperative security enables runtime checks and enforcement of security policies based on the current execution context and security state An example of imperative security is new PermissionSet PermissionState Unrestricted Demand By using CLR security attribute classes in your C applications you can enforce security policies at runtime and ensure that your code operates within the boundaries of the defined permissions and constraints reducing potential security risks What are the primary risks associated with deserialization in C applications and how can you mitigate these risks when working with potentially untrusted data AnswerDeserialization is the process of converting a serialized data format such as binary or XML back into a structured object in memory In C applications deserialization can introduce security risks due to the following reasons Remote code execution Malicious data can potentially exploit deserialization vulnerabilities allowing attackers to execute arbitrary code on the target system Denial of service Untrusted data during deserialization can cause resource exhaustion leading to a denial of service attack by consuming excessive memory or CPU usage Data tampering Deserialization can lead to unauthorized manipulation of the object s internal state or data compromising the integrity and security of the application To mitigate the risks associated with deserialization in C applications you should follow these best practices Validate and sanitize input Before deserializing untrusted data validate and sanitize it using schema validation regular expressions or custom validation logic to ensure that it is safe and conforms to the expected format Restrict deserialization Limit deserialization to a set of known safe types using mechanisms such as the SerializationBinder class This can help prevent attackers from introducing malicious types or exploiting unexpected types during deserialization Use secure libraries Use secure deserialization libraries such as DataContractJsonSerializer DataContractSerializer or XmlSerializer which have built in protections against some deserialization attacks Apply the least privilege principle Run deserialization code with the minimum necessary permissions and isolate potentially untrusted deserialization operations from other parts of the application By following these best practices you can reduce the security risks associated with deserialization in C applications while still leveraging the benefits of serializing and deserializing data Discuss the importance of code signing and strong name assemblies in ensuring the integrity of C applications How can you implement this in your development process AnswerCode signing and strong name assemblies are essential in ensuring the integrity of C applications by providing a means to verify the authenticity and origin of the code Code signing Code signing is the process of digitally signing an executable or assembly with a private key allowing users to verify that the code originates from a trusted source and has not been tampered with since its creation Signed code provides a digital signature that can be checked against the publisher s public key to ensure its authenticity To implement code signing in your development process you can use tools like the signtool exe utility that comes with the Windows SDK or use the SignTool task in MSBuild Strong name assemblies Strong naming is a mechanism to ensure the authenticity and uniqueness of NET assemblies Strong named assemblies are signed with a unique private key and this private public key pair ensures that a given assembly originates from the expected source and has not been tampered with or replaced by an unauthorized version To implement strong name signing in your development process you should Generate a strong name key pair using the sn exe utility or Visual Studio Sign your assemblies by including the generated key pair file in your project e g as an AssemblyKeyFile property in the csproj file or using the StrongNameKeyPair class Verify the integrity of signed assemblies using the sn exe utility to ensure that signed assemblies are valid and have not been tampered with By incorporating code signing and strong name assemblies in your development process you can ensure the integrity of your C applications by verifying the authenticity and origin of the code enhancing the security and trustworthiness of your software Having covered topics such as code signing and strong name assemblies it s time to dive deeper into C security best practices In the upcoming section we will discuss the importance of resource management and how implementing the IDisposable interface can help prevent resource leaks and potential security vulnerabilities in a C application What is the purpose of the IDisposable interface in the context of C security and how does proper use of this pattern help prevent resource leaks and potential security vulnerabilities AnswerThe IDisposable interface in C is used to provide a standard mechanism for releasing unmanaged resources such as file handles network connections or database connections which are acquired by an object In the context of security the proper use of the IDisposable pattern is essential to prevent resource leaks and potential security vulnerabilities Here s how proper use of the IDisposable pattern helps with security Resource management Ensuring that unmanaged resources are released in a timely manner helps prevent resource exhaustion which can lead to denial of service attacks degraded system performance or application crashes Data protection Correctly disposing of objects which hold sensitive data such as SecureString minimizes the window during which sensitive data is accessible in memory reducing the risk of unauthorized access Error prevention Properly handling the release of resources can help avoid errors due to resource contention such as attempting to access a file that is already in use or locked by another process To implement the IDisposable pattern correctly in your application follow these best practices Implement the IDisposable interface in any classes that acquire unmanaged resources In the Dispose method release all unmanaged resources and set references to null Use the using statement using var resource new DisposableResource to ensure that the Dispose method is automatically called when the resource is no longer needed By correctly implementing and using the IDisposable pattern in your C applications you can prevent resource leaks enhance security and improve the overall reliability and performance of your software How can you use the System Security Claims namespace to manage and validate user identities in a C application and what are the primary advantages it offers over traditional role based security models AnswerThe System Security Claims namespace provides a flexible extensible framework for managing and validating user identities based on a claims based security model Rather than relying on predefined roles claims based security uses claims key value pairs that represent information about a user such as name email or permissions issued by a trusted authority to determine user access rights and capabilities Here s how you can use the System Security Claims namespace in your C application Create a ClaimsIdentity object to represent the user and add claims to it var identity new ClaimsIdentity identity AddClaim new Claim ClaimTypes Name username identity AddClaim new Claim ClaimTypes Email email example com Use a ClaimsPrincipal object to represent the security context of the user which can hold one or more ClaimsIdentity objects var principal new ClaimsPrincipal identity Use the ClaimsPrincipal object to check for specific claims or perform other security related tasks bool isAuthenticated principal Identity IsAuthenticated string userEmail principal FindFirst ClaimTypes Email Value Some advantages of using the System Security Claims namespace over traditional role based security models include Flexibility Claims provide a more flexible and customizable approach to security as they can represent a wide range of information about the user whereas role based security is limited to pre defined roles Extensibility Claims can be easily extended to support additional user attributes or permissions without modifying the underlying security model Interoperability Claims based security supports various identity providers and authentication protocols such as OAuth or OpenID simplifying the process of integrating your C application with different authentication systems By using the System Security Claims namespace to manage and validate user identities in your C application you can take advantage of a more flexible extensible and interoperable security model which can be easily adapted to meet the changing needs of your application and its users Explain the concept of Object Relational Mapping ORM security in the context of C and the potential attack vectors associated with ORM frameworks How can you minimize risks when using ORM tools like Entity Framework AnswerObject Relational Mapping ORM is a technique used to map objects in an object oriented programming language like C to relational database tables ORM frameworks such as Entity Framework simplifies data access by allowing developers to interact with databases using higher level object oriented constructs instead of writing raw SQL queries However using an ORM framework can introduce potential security risks SQL Injection Even though most ORM frameworks use parameterized queries to avoid SQL injection attacks misconfigurations or improper use can still leave the application susceptible to SQL injection Insecure Direct Object Reference IDOR ORM frameworks expose a high level API to query and update database records potentially making it easier for attackers to manipulate data if access controls are not properly implemented Excessive Data Exposure ORM frameworks can automatically generate queries based on the object model which can lead to unintended data exposure if developers do not explicitly control what data can be accessed To minimize risks when using ORM tools like Entity Framework follow these best practices Use Parameterized Queries Always use parameterized queries to prevent SQL injection attacks and avoid using raw SQL queries whenever possible Implement Proper Access Controls Ensure that your application has appropriate access controls to prevent unauthorized data modification or access Limit Data Exposure Be cautious with what data is exposed through your API and ORM generated queries You can use features like projection in Entity Framework to limit the properties returned from a query Validate User Input Always validate and sanitize user input to prevent potential security vulnerabilities Keep Your ORM Framework Updated Ensure your application uses the latest version of the ORM framework with all available security patches By following these best practices you can minimize the risks associated with using ORM frameworks like Entity Framework in your C applications What is the difference between defense in depth and security by obscurity when it comes to C application security How should they be applied in a secure development process AnswerDefense in Depth is a security strategy that involves implementing multiple layers of security controls to protect an application The idea behind defense in depth is that if one security control fails there are additional layers in place to compensate for the failure Applying defense in depth in a C application development process could involve Ensuring secure coding practices Validating user input and properly handling exceptions Implementing access controls and encryption Regularly conducting security assessments including code reviews and penetration testing Security by Obscurity is a controversial concept that relies on hiding or obfuscating the design or implementation details of a system to achieve security In essence it assumes attackers won t be able to exploit vulnerabilities if they don t understand how the system works This approach is generally considered weak and ineffective as it does not address the underlying security issues In a secure development process developers should prioritize defense in depth over security by obscurity Focus on implementing robust security measures including secure coding best practices input validation access control and encryption While small elements of obfuscation can provide a minor hurdle for attackers they should never be relied upon as a primary security measure Explain how Cross Origin Resource Sharing CORS policies affect the security of C web applications How can you implement CORS restrictions to limit potential security risks while still enabling necessary cross domain data sharing AnswerCross Origin Resource Sharing CORS is a mechanism that allows web applications from one domain to access resources from another domain with the explicit permission from the server hosting the resources By default web browsers enforce the same origin policy which prevents web pages from making requests to a different domain than the one that served the web page CORS policies control which domains can access specific resources and under what conditions CORS affects the security of C web applications by potentially exposing APIs or data to untrusted domains if not configured correctly To implement CORS restrictions in a C web application follow these steps In your ASP NET Core application add the CORS service in the ConfigureServices method of the Startup class public void ConfigureServices IServiceCollection services services AddCors Create a CORS policy defining which origins methods and headers are allowed Add the policy in the Configure method of the Startup class public void Configure IApplicationBuilder app IWebHostEnvironment env app UseCors builder gt builder WithOrigins WithMethods GET POST WithHeaders Content Type Authorization Apply the CORS policy to specific endpoints by adding the EnableCors attribute with the policy name to your controllers or action methods EnableCors public class MyApiController ControllerBase Your action methods By implementing CORS restrictions in your C web application you can limit potential security risks by allowing only the necessary cross domain data sharing with trusted origins Always ensure your CORS policy is as restrictive as possible while still providing the required functionality for your application s use cases And that wraps up our extensive guide on C Security Interview Questions and Answers Armed with this knowledge you are well prepared to face security related questions in your next C interview with confidence Remember understanding and applying secure coding practices are essential to developing robust trustworthy applications By incorporating these principles and techniques into your development process you not only enhance your skillset but also demonstrate your commitment to delivering secure and reliable software to your clients or employers Good luck with your future interviews and happy secure coding	2023-06-14 10:05:30
Apple	AppleInsider - Frontpage News	Apple has invested over $200 million in its Racial Equity and Justice Initiative	https://appleinsider.com/articles/23/06/14/apple-has-invested-over-200-million-in-its-racial-equity-and-justice-initiative?utm_medium=rss	Apple has invested over million in its Racial Equity and Justice InitiativeApple has announced a further million for its initiative to support minority businesses and says this brings its total investment to twice the originally planned million Source AppleApple s Racial Equity and Justice Initiative REJI was formed in June with a remit to support education and justice reform Initially concentrating on the US REJI has now expanded to Mexico Australia and the UK Read more	2023-06-14 10:57:32
Apple	AppleInsider - Frontpage News	Five boring apps that Apple shouldn't forget about for the Apple Vision Pro	https://appleinsider.com/articles/23/06/14/five-boring-apps-that-apple-shouldnt-forget-about-for-the-apple-vision-pro?utm_medium=rss	Five boring apps that Apple shouldn x t forget about for the Apple Vision ProApple s next leap in computing rests on its Vision Pro headset and the apps people have to use with it The company shouldn t forget about some of its more boring ones ーthose could end up being the most fun Apps on Vision ProWhen the Apple Vision Pro debuted presenters used time WWDC to mostly focus on productivity and content uses for its headset It didn t even mention Fitness at all Read more	2023-06-14 10:33:19
海外TECH	Engadget	Google Home's new script editor can make smart device automations even more powerful	https://www.engadget.com/google-homes-new-script-editor-can-make-smart-device-automations-even-more-powerful-103019126.html?src=rss	Google Home x s new script editor can make smart device automations even more powerfulGoogle released its redesigned Home app last month adding routines to give users more control over smart home automations Now it s introducing a new script editor the company announced in a Google Nest blog post It gives users even more granular control over automations letting them do things like quot dim lights and lower blinds when the living room TV is on after dark quot to cite one Google example It does require some basic programming abilities though as it uses the YAML data serialization language nbsp Building an automation requires three elements starters conditions and actions A starter triggers the automation for example flipping on the TV in the above example Conditions meanwhile are prerequisites to be met before the script will run for example the time must be between sunset and sunrise Finally actions specify which devices will then be triggered i e lowering the blinds and turning off the lights nbsp GoogleWhile Google already offers a decent level of control with routines you can t do things like program multiple starters in an automation or set conditions The script editor in comparison allows the use of nearly starters conditions and actions that can be used for creating custom automations nbsp The script editor is available in a public preview build of the Google Home app or on the web along with a variety of sample scripted automations Google has provided a step by step guide as well It works across Google Home and third party smart home devices and automations work with popular sensors including Matter supported sensors For more check out the Google Nest blog nbsp This article originally appeared on Engadget at	2023-06-14 10:30:19
医療系	医療介護 CBnews	急性期病棟に介護福祉士「診療報酬で評価」に反対-日看協の吉川専門委員	https://www.cbnews.jp/news/entry/20230614192101	中央社会保険医療協議会	2023-06-14 19:53:00
医療系	医療介護 CBnews	【感染症情報】ヘルパンギーナが4週連続で増加-RSウイルスも	https://www.cbnews.jp/news/entry/20230614175854	医療機関	2023-06-14 19:52:00
ニュース	BBC News - Home	Vodafone to join with Three to create UK mobile giant	https://www.bbc.co.uk/news/business-65842845?at_medium=RSS&at_campaign=KARANGA	customer	2023-06-14 10:47:24
ニュース	BBC News - Home	Pink surprises Birmingham curry restaurant staff before gig	https://www.bbc.co.uk/news/uk-england-birmingham-65903110?at_medium=RSS&at_campaign=KARANGA	staff	2023-06-14 10:44:56
ニュース	BBC News - Home	Who will take over Silvio Berlusconi's €6bn empire?	https://www.bbc.co.uk/news/world-europe-65891251?at_medium=RSS&at_campaign=KARANGA	berlusconi	2023-06-14 10:53:10
ニュース	BBC News - Home	First female chief of Police Scotland appointed	https://www.bbc.co.uk/news/uk-scotland-65904285?at_medium=RSS&at_campaign=KARANGA	august	2023-06-14 10:55:52
ニュース	BBC News - Home	Dozens killed as migrant boat capsizes off Greece	https://www.bbc.co.uk/news/world-europe-65901005?at_medium=RSS&at_campaign=KARANGA	greece	2023-06-14 10:46:30
ニュース	BBC News - Home	Valery Zaluzhny, the man behind Ukraine's counteroffensive	https://www.bbc.co.uk/news/world-europe-65901723?at_medium=RSS&at_campaign=KARANGA	russia	2023-06-14 10:10:45
ニュース	BBC News - Home	Dorset: Pet food banks expand as demand rises	https://www.bbc.co.uk/news/uk-england-dorset-65900906?at_medium=RSS&at_campaign=KARANGA	banks	2023-06-14 10:45:38
ニュース	BBC News - Home	Real Madrid sign Bellingham for £88m	https://www.bbc.co.uk/sport/football/65901078?at_medium=RSS&at_campaign=KARANGA	borussia	2023-06-14 10:48:39
ニュース	BBC News - Home	Students among three killed in Nottingham	https://www.bbc.co.uk/news/uk-england-nottinghamshire-65893694?at_medium=RSS&at_campaign=KARANGA	nottinghamtwo	2023-06-14 10:29:51
ニュース	BBC News - Home	What we know so far	https://www.bbc.co.uk/news/uk-65890403?at_medium=RSS&at_campaign=KARANGA	nottingham	2023-06-14 10:48:34
ビジネス	不景気.com	アビストが3Dプリント事業を廃止、他事業に注力で - 不景気com	https://www.fukeiki.com/2023/06/abist-pullout-3d-printing.html	開発	2023-06-14 10:31:44
IT	週刊アスキー	ケムコの『ゾンビ・オブ・ザ・ドット』がSwitchとXboxで予約受付中！	https://weekly.ascii.jp/elem/000/004/140/4140980/	nintendo	2023-06-14 19:50:00
IT	週刊アスキー	安楽亭で1000円以下の焼肉ランチ！ドリンクもデザートもWi-Fiあってコスパ良し	https://weekly.ascii.jp/elem/000/004/140/4140839/	特集	2023-06-14 19:20:00
IT	週刊アスキー	『ゆるキャン△ つなげるみんなのオールインワン！！』の事前DLが6月15日0時より開始！リリースは同日11時から	https://weekly.ascii.jp/elem/000/004/140/4140979/	開始予定	2023-06-14 19:15:00
IT	週刊アスキー	「AEON Pay」、銀行口座からのチャージに対応	https://weekly.ascii.jp/elem/000/004/140/4140960/	aeonpay	2023-06-14 19:45:00
IT	週刊アスキー	透過率95.6%・低反射のCanon「EOS R100」用保護フィルム ハクバ	https://weekly.ascii.jp/elem/000/004/140/4140972/	canon	2023-06-14 19:45:00
IT	週刊アスキー	電子サインサービス「DottedSign（ドットサイン）」がMicrosoft「OneDrive」と統合	https://weekly.ascii.jp/elem/000/004/140/4140963/	dottedsign	2023-06-14 19:30:00
IT	週刊アスキー	EasyMesh対応の薄型・軽量Wi-Fi 6ルーター TP-Link	https://weekly.ascii.jp/elem/000/004/140/4140961/	archeraire	2023-06-14 19:15:00
IT	週刊アスキー	マネーフォワード、「マネーフォワード でんき」における新規利用申し込みの受付を再開	https://weekly.ascii.jp/elem/000/004/140/4140973/	申し込み	2023-06-14 19:15:00