投稿時間:2023-07-06 07:12:28 RSSフィード2023-07-06 07:00 分まとめ(15件)

カテゴリー等	サイト名等	記事タイトル・トレンドワード等	リンクURL	頻出ワード・要約等/検索ボリューム	登録日
IT	ITmedia 総合記事一覧	[ITmedia News] MetaのTwitter競合「Threads」、開始は7月6日午前8時になぜか前倒し	https://www.itmedia.co.jp/news/articles/2307/06/news076.html	comingsoon	2023-07-06 06:24:00
js	JavaScriptタグが付けられた新着投稿 - Qiita	[Chrome拡張]　オプションページを表示する方法	https://qiita.com/doran/items/8154f96c200b73bb9e38	chrome	2023-07-06 06:41:32
Docker	dockerタグが付けられた新着投稿 - Qiita	Docker版rsyslogのtimezoneをJSTに	https://qiita.com/sskki/items/85d6e33657db7fb78d21	rsysl	2023-07-06 06:19:30
海外TECH	DEV Community	Container Security - Strengthening the Heart of your Operations	https://dev.to/nikitakoselev/container-security-strengthening-the-heart-of-your-operations-3h0o	Container Security Strengthening the Heart of your OperationsAnother great talk at the DevSecCon conference was Container Security Strengthening the Heart of your Operations by Siddhant Khisty and Kunal Verma Kunal is a Community Manager at Kubesimplify Siddhant is a Community Manager at WeMakeDevs The video from the DevSecCon conferenceShort sum up of this amazing talk to give you some understanding till you can watch the whole video I really liked their definition of the container as a way to package an application with all the dependencies While dealing with container security understanding of architecture is essential Hypervisor Operating System KernelHardwareWhat does the container workflow look like What are the reasons for securing container images Secure Container Image improves protection against Unauth AccessData BreachesVulnerability ExploitMalicious CodeMalwareCompliance Validation questions regarding your container image security Q Are the container images up to date use stable releasescheck for available security patches or updatesQ Are container images scanned regularly Scanning for vulnerabilities using tools like KubescapeProcess to address the discovered security issuesQ Are container images verified From reputable amp trusted sourcesVerify integrity and authenticityQ Are container images signed Implement image signing using tools like cosignProcess to verify digital signatures amp ensure integrityQ Is a Zero trust model being implemented Follow a zero trust approachImplement strict access controls amp auth mechanismsAnother key point of the talk was discussing the image registry Securing Image Registry is even more important than making sure your container images are secure Safeguard from unathorised access or misuseReduce risk of deploying compromised imagesEnsure compliance amp trustworthinessThere are main questions to make sure your container registry is secure Q Is the image registry public or private Use private image registryIf public assess the potential risks implement security measuresQ Is the image registry server secure Restricted network access to the serverRegular patching hardening and monitoringQ Are access controls properly configured Granular access control for push pull amp modify imagesAuthentication mechanism to allow only authenticated usersQ Are vulnerabilities being monitored Regularly monitor stored container imagesIntegrate vulnerability scanning tools such as trivyAttackers have a huge playground How can we reduce it Reduce your attack surfaceLightweight base imagesMulti stage buildsHow to choose security tools Which parameters to consider Vulnerability ScanningImage integrity amp verificationRuntime protectionComplience and Audit CapabilitiesSome of the tools which are spread around opensource ecosystem Clair Static Vulnerability AnalysisSysdig Container Runtime SecuritySnyk Container Vulnerability scan amp monitoringKubescape Vulnerability Scanning for Images amp Image RegistryFalco Run time SecurityTrivy Vulnerability ScanningTakeaways Image securityRegistry securitySecure the build processHost SecurityTools to make life easier	2023-07-05 21:47:26
海外TECH	DEV Community	Episode 23/26: New Control Flow, Angular 17, AnalogJS, "Developer Preview"	https://dev.to/this-is-angular/episode-2326-new-control-flow-angular-17-analogjs-developer-preview-5e5d	Episode New Control Flow Angular AnalogJS quot Developer Preview quot We had Alex Rickabaugh talking about the need for a new control flow syntax Minko Gechev confirmed the release plan for Signal based components in Angular as a developer preview Brandon Roberts gave an update on AnalogJS and we finally got a definition for Developer Preview Alex Rickabaugh The need for a control flow syntaxAlex Rickabaugh tech lead of the Angular framework gave a thorough explanation about the need for a new control flow syntax Currently we use the structural directives ngIf ngFor and ngSwitch for the control flow Angular doesn t execute those imperatively like an if statement in JavaScript Instead they act as some kind of metadata for the compiler The compiler splits up the component into multiple views A view stands for a set of DOM elements which are static The control flow directives act as a criterion a view s creation In addition the compiler generation an lt ng template gt and applies the structural directives as a normal property binding on it The current approach has some issues though The syntax is not very developer friendly The type check is incomplete This is especially the case for the else statement We need to use an lt ng container gt if we want to have a directive but don t want to create a separate DOM element The same is true when we want to use multiple directives We can apply just one to a DOM element or Finally if multiple directives need to work together it also can become quite hard The new RFC for control flow will fix those issues It will be an extension of the template syntax According to Alex one of the downsides of the upcoming approach is that they move away from the possibility of writing these kind of functionalities on your own he called it user space The new control flow will be a native feature of the template The main takeaway though is that there is a chance that ngIf ngFor and ngSwitch might become deprecated When and how is a future topic But Angular wants to have one way of doing central things Mountain View and San Francisco Angular June Virtual Meetup YouTube Join us for our June virtual meetup Register online at goo gle mtv sf meet youtube com Minko Gechev on Angular AirMinko Gechev Angular product lead was a guest at the Angular Air podcast He confirmed the plan to release Signal based components in Angular as a developer preview The signals library introduced in Angular will already become stable The Signal based component is a new type that runs without zone js The recommendation is to start using signals in performance critical parts of your application It is not possible to come up with an automatic migration to Signals Brandon Roberts on AnalogJSBrandon Roberts summarised the current status of Analog js This meta framework adds features like Vitest File based routing API routes and server side rendering and generation out of the box brandonroberts dev Meaning of Developer Preview amp Future of FormsIn the latest recordings of the ng conf we got two new insights A feature marked as a developer preview is not a beta version It is fully functional and pre stable but it could happen that the API might change Faster apps with Angular SSR Mark Thompson amp Jessica Janiuk ng conf YouTube Get the latest on Angular Server Side Rendering straight from the Angular team In this ng conf talk Mark Thompson and Jessica Janiuk show us how Angu youtube com Second a forms overhaul is a mid term goal Currently the Angular team doesn t know yet in which direction it will go It might even be that Reactive and Template might come together again Angular Team Panel Q amp A ng conf YouTube Angular information straight from the source Join our Angular Team panel Minko Gechev Emma Twersky Mark Thompson Jeremy Elbourn Jessica Janiuk Alex youtube com	2023-07-05 21:13:09
海外TECH	Engadget	OpenAI is forming a team to rein in superintelligent AI	https://www.engadget.com/openai-is-forming-a-team-to-rein-in-superintelligent-ai-214333388.html?src=rss	OpenAI is forming a team to rein in superintelligent AIOpenAI is forming a dedicated team to manage the risks of superintelligent artificial intelligence A superintelligence is a hypothetical AI model that is smarter than even the most gifted and intelligent human and excels at multiple areas of expertise instead of one domain like some previous generation models OpenAI believes such a model could arrive before the end of the decade “Superintelligence will be the most impactful technology humanity has ever invented and could help us solve many of the world s most important problems the non profit said “But the vast power of superintelligence could also be very dangerous and could lead to the disempowerment of humanity or even human extinction The new team will be co lead by OpenAI Chief Scientist Ilya Sutskever and Jan Leike the research lab s head of alignment Additionally OpenAI said it would dedicate percent of its currently secured compute power to the initiative with the goal of developing an automated alignment researcher Such a system would theoretically assist OpenAI in ensuring a superintelligence is safe to use and aligned with human values “While this is an incredibly ambitious goal and we re not guaranteed to succeed we are optimistic that a focused concerted effort can solve this problem OpenAI said “There are many ideas that have shown promise in preliminary experiments we have increasingly useful metrics for progress and we can use today s models to study many of these problems empirically The lab added it would share a roadmap in the future Wednesday s announcement comes as governments around the world consider how to regulate the nascent AI industry In the US Sam Altman the CEO of OpenAI has met with at least federal lawmakers in recent months Publicly Altman has said AI regulation is “essential and that OpenAI is “eager to work with policymakers But we should be skeptical of such proclamations and indeed efforts like OpenAI s Superalignment team By focusing the attention of the public on hypothetical risks that may never materialize organizations like OpenAI shift the burden of regulation to the horizon instead of the here and now There are much more immediate issues around the interplay between AI and labor misinformation and copyright policymakers need to tackle today not tomorrow This article originally appeared on Engadget at	2023-07-05 21:43:33
海外TECH	Engadget	Spotify stops accepting payments that were set up through Apple's App Store	https://www.engadget.com/spotify-stops-accepting-payments-that-were-set-up-through-apples-app-store-211722624.html?src=rss	Spotify stops accepting payments that were set up through Apple x s App StoreSpotify is notifying users who ve subscribed to its Premium service through Apple s in app purchase system that it will no longer be supporting it as a payment method As a refresher Spotify hasn t allowed users to subscribe through Apple s in app purchase since However those who had already subscribed via that method years ago could keep paying Spotify that way until now As reported by Variety the company is emailing affected subscribers about the upcoming change The email reads “We re contacting you because when you joined Spotify Premium you used Apple s billing service to subscribe Unfortunately we no longer accept that billing method as a form of payment Spotify continues to say that those users will automatically be switched to the company s Free ad supported tier at the end of the current billing cycle “If you wish to keep your Premium subscription you will need to re subscribe after your last billing period has ended and your account has been moved on to the Free account But that s probably for the best Due to Apple taking percent of in app purchases Spotify users who were subscribed through in app purchases were being charged an extra per month compared to subscribing through Spotify directly That s despite the fact that Apple now reduces its commission rate to percent on subscriptions after the first year Apple said in a regulatory filing from that it collected that percent fee on roughly Spotify customers Users transitioning from Apple s payments can subscribe to Premium via a credit card or PayPal Both Apple and Google charge a “tax on their respective app stores regardless if a user is purchasing apps or subscribing through in app purchase Early last year Google announced that it would be piloting a program that would allow third party billing systems on Android beginning with Spotify called User Choice Billing UCB Google began rolling out UCB to Spotify users late last year Though it s unclear how many users are subscribing via UCB compared to using Google s standard in app purchase system While there have been rumors about Apple allowing third party app stores on iOS there aren t any official plans for those or for accepting third party billing This article originally appeared on Engadget at	2023-07-05 21:17:22
海外科学	NYT > Science	Commercial-Scale Wind Farm Off New Jersey Coast Approved	https://www.nytimes.com/2023/07/05/climate/wind-farm-new-jersey-coast.html	biden	2023-07-05 21:50:12
金融	ニュース - 保険市場TIMES	損保ジャパン、京都大学と「災害リスクファイナンス産学共同研究部門」設立	https://www.hokende.com/news/blog/entry/2023/07/06/070000		2023-07-06 07:00:00
ニュース	BBC News - Home	Labour leader pledges education reforms to break class barriers	https://www.bbc.co.uk/news/uk-politics-66113585?at_medium=RSS&at_campaign=KARANGA	plans	2023-07-05 21:35:04
ニュース	BBC News - Home	Wimbledon 2023: Iga Swiatek serves up a bagel and steps up title hunt as Sakkari slips up	https://www.bbc.co.uk/sport/tennis/66109417?at_medium=RSS&at_campaign=KARANGA	Wimbledon Iga Swiatek serves up a bagel and steps up title hunt as Sakkari slips upTop seed Iga Swiatek continues her pursuit of a maiden Wimbledon title with victory on Centre Court over Spain s Sara Sorribes Tormo	2023-07-05 21:19:39
ビジネス	東洋経済オンライン	市場は無視しすぎ？6月のFOMCで浮上したリスク 失業率もインフレ率も思うように下がらず | 市場観測 | 東洋経済オンライン	https://toyokeizai.net/articles/-/684516?utm_source=rss&utm_medium=http&utm_campaign=link_back	東洋経済オンライン	2023-07-06 06:30:00
海外TECH	reddit	S10E31 Post-Episode Discussion Thread 🧵	https://www.reddit.com/r/LoveIslandTV/comments/14rnbt3/s10e31_postepisode_discussion_thread/	SE Post Episode Discussion Thread submitted by u mayallrob to r LoveIslandTV link comments	2023-07-05 21:04:01
ニュース	THE BRIDGE	越境ECの返品や滞留在庫を現地再流通、ユアトレードが1億円をシード調達——ジェネシアVとANRIから	https://thebridge.jp/2023/07/yourtrade-seed-round-funding	越境ECの返品や滞留在庫を現地再流通、ユアトレードが億円をシード調達ージェネシアVとANRIから国際流通の最適化プラットフォームを目指すユアトレードは日、シードラウンドで億円を調達したと発表した。	2023-07-05 21:15:20
ニュース	THE BRIDGE	KDDI、フライウィールを連結子会社化——はじまりはMUGENLABO、データエンジニアリングで共に事業を生み出す関係に	https://thebridge.jp/2023/07/kddi-flywheel_alliance-mugenlabo-magazine	KDDI、フライウィールを連結子会社化ーはじまりはMUGENLABO、データエンジニアリングで共に事業を生み出す関係に本稿はKDDIが運営するサイト「MUGENLABOMagazine」に掲載された記事からの転載データ活用プラットフォーム「Conata」を開発・提供するフライウィールは今年月、KDDIおよびKDDIDigitalDivergenceHoldingsとの資本業務提携を締結しました。	2023-07-05 21:00:51