はじめに 対象イベント 読み方、使い方 Remote Code Execution(RCE) 親ディレクトリ指定によるopen_basedirのバイパス PHP-FPMのTCPソケット接続によるopen_basedirとdisable_functionsのバイパス JavaのRuntime.execでシェルを実行 Cross-Site Scripting(XSS) nginx環境でHTTPステータスコードが操作できる場合にCSPヘッダーを無効化 GoogleのClosureLibraryサニタイザーのXSS脆弱性 WebのProxy機能を介したService Workerの登録 括弧を使わないXSS /記号を使用せずに遷移先URLを指定 SOME(Same Origin Method Execution)を利用してdocument.writeを順次実行 SQL Injection MySQ
GitHub - modelcontextprotocol/servers: Model Context Protocol Servers
Official integrations are maintained by companies building production ready MCP servers for their platforms. 21st.dev Magic - Create crafted UI components inspired by the best 21st.dev design engineers. 2slides - An MCP server that provides tools to convert content into slides/PPT/presentation or generate slides/PPT/presentation with user intention. ActionKit by Paragon - Connect to 130+ SaaS inte
Fish 4.0: The Fish Of Theseus
About two years ago, our head maintainer @ridiculousfish opened what quickly became our most-read pull request: #9512 - Rewrite it in Rust Truth be told, we did not quite expect that to be as popular as it was. It was written as a bit of an in-joke for the fish developers first, and not really as a press release to be shared far and wide. We didn’t post it anywhere, but other people did, and we go
31st December 2024 A lot has happened in the world of Large Language Models over the course of 2024. Here’s a review of things we figured out about the field in the past twelve months, plus my attempt at identifying key themes and pivotal moments. This is a sequel to my review of 2023. In this article: The GPT-4 barrier was comprehensively broken Some of those GPT-4 models run on my laptop LLM pri
Amazon Linux 2023, a Cloud-Optimized Linux Distribution with Long-Term Support | Amazon Web Services
AWS News Blog Amazon Linux 2023, a Cloud-Optimized Linux Distribution with Long-Term Support 11/17/2025 Update: Amazon Linux 2 end of support date (End of Life, or EOL) has been extended to 2026-06-30. I am excited to announce the general availability of Amazon Linux 2023 (AL2023). AWS has provided you with a cloud-optimized Linux distribution since 2010. This is the third generation of our Amazon
Update 1.80.1: The update addresses these issues. Update 1.80.2: The update addresses this security issue. Downloads: Windows: x64 Arm64 | Mac: Universal Intel silicon | Linux: deb rpm tarball Arm snap Welcome to the June 2023 release of Visual Studio Code. There are many updates in this version that we hope you'll like, some of the key highlights include: Accessibility improvements - Accessible V
I first learned Kubernetes ("k8s" for short) in 2018, when my manager sat me down and said "Cloudflare is migrating to Kubernetes, and you're handling our team's migration." This was slightly terrifying to me, because I was a good programmer and a mediocre engineer. I knew how to write code, but I didn't know how to deploy it, or monitor it in production. My computer science degree had taught me a
Version 1.108 is now available! Read about the new features and fixes from December. Release date: May 8, 2025 Update: Enable Next Edit Suggestions (NES) by default in VS Code Stable (more...). Update 1.100.1: The update addresses these security issues. Update 1.100.2: The update addresses these issues. Update 1.100.3: The update addresses these issues. Downloads: Windows: x64 Arm64 | Mac: Univers
Update 1.97.1: The update addresses these security issues. Update 1.97.2: The update addresses these issues. Downloads: Windows: x64 Arm64 | Mac: Universal Intel silicon | Linux: deb rpm tarball Arm snap Welcome to the January 2025 release of Visual Studio Code. There are many updates in this version that we hope you'll like, some of the key highlights include: Next Edit Suggestions (preview) - Co
Update 1.86.2: The update addresses these issues. Update 1.86.1: The update addresses these issues. Downloads: Windows: x64 Arm64 | Mac: Universal Intel silicon | Linux: deb rpm tarball Arm snap Welcome to the January 2024 release of Visual Studio Code. There are many updates in this version that we hope you'll like, some of the key highlights include: Per-window zoom levels - Adjust the zoom leve
Version 1.108 is now available! Read about the new features and fixes from December. Update 1.85.1: The update addresses these issues. Update 1.85.2: The update addresses these issues. Downloads: Windows: x64 Arm64 | Mac: Universal Intel silicon | Linux: deb rpm tarball Arm snap Welcome to the November 2023 release of Visual Studio Code. There are many updates in this version that we hope you'll l
Enabling continuous workflows for AWS App Runner service with persistency using AWS Copilot CLI | Amazon Web Services
Containers Enabling continuous workflows for AWS App Runner service with persistency using AWS Copilot CLI We recently launched a new service called AWS App Runner, the simplest way to build and run your containerized stateless web application on AWS. App Runner provisions and manages all the required resources for you to run containers such as build pipelines, load balancers, scaling in and out,
Windows10でWindows Terminalを設定し、AWS CLIv2をインストールするまでの手順を公開します。 DA事業本部コンサルティングチームのnkhrです。入社して新しいPCの設定を行ったので、手順を公開します。 Windowsでの開発環境設定は、Microsoft公式ドキュメントに役割ごとの開発環境マニュアルがあるので参考になると思います。 このブログでは以下の設定を記載しています。 Windows Terminal設定 PowerShell7のインストール TerminalでのPowerShellの外観カスタマイズ (PowerLineの設定) WSL (Ubuntu)のインストール Pipenvの設定 (Pythonのパッケージ管理・仮想環境管理ライブラリ) vim for windowsのインストール AWS CLIのインストールと設定 Windows Termi
はじめに お疲れ様です。矢儀 @yuki_ink です。 こちらのAWS公式ハンズオンをやってみました。 ECSとFargate/EC2を利用した環境構築から、CI/CDパイプラインを利用したデプロイまで、一通り体験できる素晴らしいハンズオンでした。 次のようなみなさんにおすすめです。 ECSを知識として知ってはいるが、実際に触ったことがない コンテナの何が優れているのか、実感を持っては理解できない CI/CDパイプラインでコンテナをデプロイしてみたい ハンズオンで構築する環境の構成イメージはこちら。 1. VS Code Serverの構築 このハンズオンでは、開発環境として Visual Studio Code Server (VS Code Server) を利用するとのことで、まず、CloudFormationでVS Code Serverを構築していきます。 ハンズオンページの
Exactly ten years ago today, we published "Why We Created Julia", introducing the Julia project to the world. At this point, we have moved well past the ambitious goals set out in the original blog post. Julia is now used by hundreds of thousands of people. It is taught at hundreds of universities and entire companies are being formed that build their software stacks on Julia. From personalized me
It’s been a long time since the last update! In all honesty, the first Progress Report set the bar a little bit too high, and I found it difficult to sit down and put together monthly reports that would do it justice. So, going forward, we’re going to be providing shorter-form updates while striving to keep a monthly schedule. That said, a lot has happened in the past few months, so strap in for a
Or if the package is only meant to be run on Node.js and wants to fallback to CJS on older versions that don't have require(esm): { "type": "module", "exports": { // On new version of Node.js, both require() and import get the ESM version "module-sync": "./index.js", // On older version of Node.js, where "module-sync" and require(esm) are // not supported, use the CJS version to avoid dual-package
Raspberry Piのシリアルポート設定（UART）を分かりやすく解説します。 Raspberry Piで使用できるUARTにはPL011（16550互換）とmini UARTの2種類があります。mini UARTは機能に制限があるUARTになります。 プライマリUARTは、シリアルコンソールとして使うか、汎用シリアルとして使うかの割り当てが可能です。 また、Raspberry Pi 4ではUART2～UART5の4つのPL011が追加されています。 準備 Raspberry PiのすべてのUARTは3.3Vで動作します。そのため、通常のシリアルポートに接続する場合や、5Vのシステムに接続する場合には変換アダプターを使用して接続します。 USB to TTLシリアルケーブル パソコンと接続するために、USB to TTLシリアルケーブルを用意しました。 adafruit製のUSB to
Update 1.79.1: The update addresses this security issue. Update 1.79.2: The update addresses these issues. Downloads: Windows: x64 Arm64 | Mac: Universal Intel silicon | Linux: deb rpm tarball Arm snap Welcome to the May 2023 release of Visual Studio Code. There are many updates in this version that we hope you'll like, some of the key highlights include: Read-only mode - Mark specific files and f
2024-10-16, Version 23.0.0 (Current), @RafaelGSS We’re excited to announce the release of Node.js 23! Key highlights include: Enabling require(esm) by default for Node.js applications Removing support for Windows 32-bit systems Stabilizing the node --run command Enhancements to the test runner, including glob pattern support for coverage files Node.js 23 will replace Node.js 22 as the ‘Current’ re
Update 1.92.1: The update addresses these issues. Update 1.92.2: The update addresses these issues. Downloads: Windows: x64 Arm64 | Mac: Universal Intel silicon | Linux: deb rpm tarball Arm snap Welcome to the July 2024 release of Visual Studio Code. There are many updates in this version that we hope you'll like, some of the key highlights include: Default browser - Configure which browser to use
Update 1.74.1: The update addresses these issues. Update 1.74.2: The update addresses these issues. Update 1.74.3: The update addresses this security issue. Downloads: Windows: x64 Arm64 | Mac: Universal Intel silicon | Linux: deb rpm tarball Arm snap Welcome to the November 2022 release of Visual Studio Code. There are many updates in this version that we hope you'll like, some of the key highlig
Join a VS Code Dev Days event near you to learn about AI-assisted development in VS Code. Update 1.56.1: The update addresses these security issues. Update 1.56.2: The update addresses these issues. Downloads: Windows: x64 Arm64 | Mac: Universal Intel silicon | Linux: deb rpm tarball Arm snap Welcome to the April 2021 release of Visual Studio Code. The VS Code team has been busy this month working
Following up from the last post, there is a lot more we need to cover. This was intended to be the post where we talk exclusively about benchmarks and numbers. But, I have unfortunately been perfectly taunted and status-locked, like a monster whose “aggro” was pulled by a tank. The reason, of course, is due to a few folks taking issue with my outright dismissal of the C and C++ APIs (and not showi
Noble Numbat Release Notes Table of Contents Introduction New features in 24.04 LTS Known Issues Official flavours More information Introduction These release notes for Ubuntu 24.04 LTS (Noble Numbat) provide an overview of the release and document the known issues with Ubuntu and its flavours. For details of the changes applied since 24.04, please see the 24.04.2 change summary. Support lifespan
North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack | Google Cloud Blog
Written by: Austin Larsen, Dima Lenz, Adrian Hernandez, Tyler McLellan, Christopher Gardner, Ashley Zaya, Michael Rudden, Mon Liclican Introduction Google Threat Intelligence Group (GTIG) is tracking an active software supply chain attack targeting the popular Node Package Manager (NPM) package "axios." Between March 31, 2026, 00:21 and 03:20 UTC, an attacker introduced a malicious dependency name
VirtualBox の「Arch Linux」に「OpenBox」デスクトップ〈H123〉 - Linux あれこれ
登録日: 2021-07-11 更新日: 2023-03-18 前回、「Xubuntu 20.04.2 LTS」に、ハードウェアの違いを仮想マシンにより吸収してくれる「VirtualBox」をインストールして、ゲストOS として「Arch Linux」をインストール しました。 今回は、それに「OpenBox」デスクトップ環境をインストールしたので、その備忘録です。 - 「OpenBox」はデスクトップ環境というよりも、デスクトップ環境の一部の機能です。余計な機能がない分、使えるまでに手間がかかりますが、出来上がれば軽量です。このあたりは、Arch Linux に似ています。 - - ホストOS : Xubuntu 20.04.2 LTS ゲストOS : Arch Linux（2021.07.01 のiso イメージ） ←（作業時のバージョン） - - 使用したPC は「ASUS Chro
Today we are very excited to launch Wasmer 3.0, following three months of work since our first alpha. So, what’s new in Wasmer? wasmer is now able to run WAPM packages directly via wasmer run Better API and memory management We have simplified the way engines work. Now, only one engine is needed (although the engine might use different artifacts to load/store code) Zero-copy deserialization of art
はじめに 自作PCでローカルLLMを動かすために、llama.cppを用いて量子化したモデルを動かす手法がある。ほとんどのローカルLLMはTheBlokeが量子化して公開してくれているため、ダウンロードすれば簡単に動かすことができるが、一方で最新のモデルを検証したい場合や自前のモデルを量子化したい場合など、TheBlokeに無いモデルを動かしたい時がある。 今回、私は以下のXwin-LM/Xwin-Math-70B-V1.0を検証したくて、llama.cppを用いて自前で量子化を行いました。その手法をまとめておく。 ちなみに、このモデルは、数学問題に特化しているモデルで、既存の数学問題に特化したローカルLLMの中でベンチマーク上は最も優秀なモデルとされている。[1] 私の PC のスペック[2] i7 13700K 3090 24GB DDR5 128GB Docker環境の準備 私はVS
Ubuntu 22.04のインストールメモ
Ubuntu 22.04 LTS (Jammy Jellyfish)がリリースされたので、早速ダウンロードして、 System76 Lemur1にインストールしてみた。 22.04の主要な変更点や新機能は、 日経Linuxや、他のサイトにお任せする。 久々のUbuntu環境構築だったので、自分なりのメモを残しておく。 ディレクトリ英語化 LANG=C xdg-user-dirs-gtk-update ファイラーnautilusのサイドバーで、日本語ディレクトリのリンク切れが残り続けて、英語ディレクトリがお気に入り配下として追加されていても、再ログインすれば、ちゃんと切り替わった。 Zsh Arch LinuxやMacだとzshがデフォルトシェルなので、これを機に慣れておく。 sudo apt-get install zsh chsh -s $(which zsh) zshで初回起動したとき
Node.js
Notable Changes Updated npm to 9.2.0 Based on the list of guidelines we've established on integrating npm and node, here is a grouped list of the breaking changes with the reasoning as to why they fit within the guidelines linked above. Note that all the breaking changes were made in 9.0.0. All subsequent minor and patch releases after [email protected] do not contain any breaking changes. Engines
FreeSimpleGUI
FreeSimpleGUI User Interfaces for Humans - Transforms tkinter, Qt, Remi, WxPython into portable people-friendly Pythonic interfaces The Call Reference Section Moved to here This manual is under construction as we adapt changes to FreeSimpleGUI and make simplifications. Some links may not work as expected. References to "PySimpleGUI" can safely be assumed to be interchangable with "FreeSimpleGUI" J
Update 1.88.1: The update addresses these issues. Downloads: Windows: x64 Arm64 | Mac: Universal Intel silicon | Linux: deb rpm tarball Arm snap Welcome to the March 2024 release of Visual Studio Code. There are many updates in this version that we hope you'll like, some of the key highlights include: Apply custom editor labels - Distinguish between editors with same file names. Locked scrolling -
GitHub - ComfyUI-Workflow/awesome-comfyui: A collection of awesome custom nodes for ComfyUI
ComfyUI-Gemini_Flash_2.0_Exp (⭐+172): A ComfyUI custom node that integrates Google's Gemini Flash 2.0 Experimental model, enabling multimodal analysis of text, images, video frames, and audio directly within ComfyUI workflows. ComfyUI-ACE_Plus (⭐+115): Custom nodes for various visual generation and editing tasks using ACE_Plus FFT Model. ComfyUI-Manager (⭐+113): ComfyUI-Manager itself is also a cu
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
【2020年】CTF Web問題の攻撃手法まとめ - こんとろーるしーこんとろーるぶい
Things we learned about LLMs in 2024
June 2023 (version 1.80)
Solving common problems with Kubernetes
April 2025 (version 1.100)
January 2025 (version 1.97)
January 2024 (version 1.86)
November 2023 (version 1.85)
WindowsPC開発用の初期設定～AWS CLIインストールまで～ | DevelopersIO
AWS公式のECSハンズオンがとても良かった!! - Qiita
Why We Use Julia, 10 Years Later
Progress Report: August 2021 - Asahi Linux
Node.js — Node.js 22.10.0 (Current)
Raspberry Piのシリアルポート設定（UART）を理解する - Toki Blog（トキブログ）
May 2023 (version 1.79)
Node.js — Node.js 23.0.0 (Current)
July 2024 (version 1.92)
November 2022 (version 1.74)
April 2021 (version 1.56)
cuneicode, and the Future of Text in C
Ubuntu 24.04 LTS (Noble Numbat) Release Notes
Announcing Wasmer 3.0 · Blog · Wasmer
llama.cppでHuggingFaceにあるモデルを自分で量子化して動かす方法
March 2024 (version 1.88)