• THEHACKERNEWS.COM
    Misconfigured Kubernetes RBAC in Azure Airflow Could Expose Entire Cluster to Exploitation
    Dec 31, 2025Ravie LakshmananVulnerability / Cloud SecurityCybersecurity researchers have uncovered three security weaknesses in Microsoft's Azure Data Factory Apache Airflow integration that, if successfully exploited, could have allowed an attacker to gain the ability to conduct various covert actions, including data exfiltration and malware deployment."Exploiting these flaws could allow attackers to gain persistent access as shadow administrators over the entire Airflow Azure Kubernetes Service (AKS) cluster," Palo Alto Networks Unit 42 said in an analysis published earlier this month.The vulnerabilities, albeit classified as low severity by Microsoft, are listed below -Misconfigured Kubernetes RBAC in Airflow clusterMisconfigured secret handling of Azure's internal Geneva service, andWeak authentication for GenevaBesides obtaining unauthorized access, the attacker could take advantage of the flaws in the Geneva service to potentially tamper with log data or send fake logs to avoid raising suspicion when creating new pods or accounts.The initial access technique involves crafting a directed acyclic graph (DAG) file and uploading it to a private GitHub repository connected to the Airflow cluster, or altering an existing DAG file. The end goal is to launch a reverse shell to an external server as soon as it's imported.To pull this off, the threat actor will have to first gain write permissions to the storage account containing DAG files by utilizing a compromised service principal or a shared access signature (SAS) token for the files. Alternatively, they can break into a Git repository using leaked credentials.Although the shell obtained in this manner was found to be running under the context of the Airflow user in a Kubernetes pod with minimal permissions, further analysis identified a service account with cluster-admin permissions connected to the Airflow runner pod.This misconfiguration, coupled with the fact that the pod could be reachable over the internet, meant that the attacker could download the Kubernetes command-line tool kubectl and ultimately take full control of the entire cluster by "deploying a privileged pod and breaking out onto the underlying node."The attacker could then leverage the root access to the host virtual machine (VM) to burrow deeper into the cloud environment, gain unauthorized access to Azure-managed internal resources, including Geneva, some of which grant write access to storage accounts and event hubs."This means a sophisticated attacker could modify a vulnerable Airflow environment," security researchers Ofir Balassiano and David Orlovsky said. "For example, an attacker could create new pods and new service accounts. They could also apply changes to the cluster nodes themselves and then send fake logs to Geneva without raising an alarm.""This issue highlights the importance of carefully managing service permissions to prevent unauthorized access. It also highlights the importance of monitoring the operations of critical third-party services to prevent such access."The disclosure comes as the Datadog Security Labs detailed a privilege escalation scenario in Azure Key Vault that could permit users with the Key Vault Contributor role to read or modify Key Vault contents, such as API keys, passwords, authentication certificates, and Azure Storage SAS tokens.The problem is that while a user with the Key Vault Contributor role had no direct access to Key Vault data over a key vault configured with access policies, it was discovered that the role did come with permissions to add itself to Key Vault access policies and access Key Vault data, effectively bypassing the restriction."A policy update could contain the ability to list, view, update and generally manage the data within the key vault," security researcher Katie Knowles said. "This created a scenario where a user with the Key Vault Contributor role could gain access to all Key Vault data, despite having no [Role-Based Access Control] permission to manage permissions or view data."Microsoft has since updated its documentation to emphasize the access policy risk, stating: "To prevent unauthorized access and management of your key vaults, keys, secrets, and certificates, it's essential to limit Contributor role access to key vaults under the Access Policy permission model."The development also follows the discovery of an issue with Amazon Bedrock CloudTrail logging that made it difficult to differentiate malicious queries from legitimate ones made to large language models (LLMs), thereby allowing bad actors to conduct reconnaissance without raising any alert."Specifically, failed Bedrock API calls were logged in the same manner as successful calls, without providing any specific error codes," Sysdig researcher Alessandro Brucato said."The lack of error information in API responses may hinder detection efforts by generating false positives in CloudTrail logs. Without this detail, security tools may misinterpret normal activity as suspicious, leading to unnecessary alerts and potential oversight of genuine threats."Found this article interesting? Follow us on Twitter and LinkedIn to read more exclusive content we post.SHARE
    0 Comments 0 Shares 71 Views
  • WWW.CNET.COM
    Best Mattresses You Can Buy Online
    Searching for the perfect online mattress? Youre in the right place.
    0 Comments 0 Shares 54 Views
  • WWW.CNET.COM
    Want the Benefits of Apple Cider Vinegar Without the Harsh Taste? Try These Tasty ACV Drinks.
    Our Experts Written by David Watsky Our expert, award-winning staff selects the products we cover and rigorously researches and tests our top picks. If you buy through our links, we may get a commission. Reviews ethics statement Why You Can Trust CNET 16171819202122232425+ Years of Experience 14151617181920212223 Hands-on Product Reviewers 6,0007,0008,0009,00010,00011,00012,00013,00014,00015,000 Sq. Feet of Lab Space How we test CNETs expert staff reviews and rates dozens of new products and services each month, building on more than a quarter century of expertise.Table of Contents Our Picks Bragg Refreshers View details $12 at Walmart View details Sidekick Sodas View details $39 at Sidekick Sodas View details Poppi Prebiotic ACV Sodas View details $29 at Amazon View details Remedy ACV Immunity Shot View details $50 at Amazon View details Bragg Flavored ACV Shots View details $20 at Amazon View details Emergen-C ACV Packets View details $13 at Walmart View details Remedy Apple Cider Vinegar Sparkling Water (Currently out of stock) View details $30 at Amazon View details Table of Contents These flavored Apple Cider Vinegar drinks make downing the healthy elixir a whole lot more pleasant. David Watsky/CNETApple cider vinegar is popular for the amount of health benefits it offers. It's a miracle drink, with the ability to kill bacteria, improve gut health and cholesterol levels, which makes it an essential drink for those with various illnesses. But at the same time, the drink is also notorious for its taste: It tastes like death warmed up (or on ice, if you prefer it cool), and most folks can't stomach it. Thankfully, there is a selection of drinks that incorporate apple cider vinegar while providing a much better taste, including sodas, shots and more.Do you want all the potential benefits of apple cider vinegar, but are reluctant to drink it straight? Don't worry, there are other alternatives. These apple cider vinegar-based beverages are mixed with fresh fruit juice, honey and ginger -- also known for their health benefits -- and are meant to be enjoyed, not tolerated. If these ACV drinks dont hit the spot, no worries -- its not a total loss. Share the leftovers with friends or family as a thoughtful post-holiday treat. After all, its the season of giving, and nothing goes to waste. I tried seven options, including apple cider vinegar (ACV) sparkling water, a few blends of ACV and fruit juices, and some flavored shots of premixed vinegar. Below, you'll find a list of my favorite drinks and quick shots to help you get your daily apple cider vinegar fix, along with what I thought about how they taste.Read more:The ABCs of Apple Cider Vinegar: Benefits, Precautions and Proper Dosage Watch this: Taste-Testing 6 Apple Cider Vinegar Drinks 01:32 Best apple cider vinegar drinks $12 at Walmart Braggs Refreshers contain apple cider vinegar along with juice, lemon and other natural ingredients to create a refreshing beverage anchored by healthy apple cider vinegar. The beverages come in four flavors, but I liked the lemon ginger refresher best. The 40-calorie refreshers taste a lot like kombucha and are best consumed cold or poured over ice. $39 at Sidekick Sodas Sidekicks are not your typical sugar-packed soda. These fruity and tart sodas mix healthy ACV with plum, strawberry and mango juice and a dash of New Zealand honey. All three recipes I tried were excellent; not too sweet and perfectly refreshing. I enjoyed the plum strawberry the most and found the sparkling beverage was best when poured over ice.Sidekicks aren't cheap. You can order a 12-pack from the website for $39. This fun and flashy line of low-calorie sodas is marketed as aiding in digestive health and boasts apple cider vinegar as the third ingredient after water and cane sugar. Poppi prebiotic sodas come in several flavors; I tried lemon-strawberry and ginger-lime and found both delicious. The apple cider vinegar flavor is tamer than in some of the other beverages I tried, and with 4 grams of sugar, the sodas aren't too sweet and have just 25 calories.A 12-pack of Poppi's healthier ACV sodas costs $30 at Walmart or $8 for a four-pack at Target.
    0 Comments 0 Shares 60 Views
  • WWW.CNET.COM
    Best Internet Providers in Nampa, Idaho
    Sparklight may have wide coverage in Nampa, but Quantum Fibers multi-gig plan steals the spotlight. Check out the top broadband options in this Idaho city.
    0 Comments 0 Shares 54 Views
  • WWW.VIDEOGAMER.COM
    Is Demon Slayer coming to Fortnite? All you need to know
    You can trust VideoGamer. Our team of gaming experts spend hours testing and reviewing the latest games, to ensure you're reading the most comprehensive guide possible. Rest assured, all imagery and advice is unique and original. Check out how we test and review games hereDemon Slayer is a collaboration that many Fortnite players would love to have. Chapter 6 has brought many new collabs and amazing skins to the game, yet Epic Games wont slow down anytime soon. There have been a lot of rumblings regarding the popular anime, yet the Fortnite developer hasnt revealed anything about it yet.In this article, we will take a look at the the rumored partnership in Fortnite. Well check where this rumor comes from and if the Demon Slayer collaboration will really come to the game.When will the Fortnite x Demon Slayer collaboration come out?Before we start, it should be noted that this Fortnite anime collaboration has not been confirmed by Epic Games yet. However, like most of other information about the future content, the collaboration was leaked. This time, Hypex and ShiinaBR leaked the partnership, and both of them have an amazing track record with leaks.The collaboration was leaked in late November 24, a week before the release of Fortnite Chapter 6. However, these anime skins have come out since then, which is why many players have questioned the legitimacy of the leak.The Fortnite x Demon Slayer collaboration should be released soon. Image by VideoGamerWhile these two leakers are generally trustworthy, its important to note that theyve never revealed the potential release date of the Fortnite x Demon Slayer collaboration. They simply said that it would come soon, which likely refers to Chapter 6 Season 1. With the season ending in late February 2025, we are likely still a few weeks away from the collab.There is also a chance that Epic Games scrapped this content. However, this is an unlikely scenario considering how much traction it has gained over social media. The company is on a winter break right now, but we can expect more leaks and possibly collaboration teasers in early January, after the next Fortnite update. FortnitePlatform(s):Android, iOS, macOS, Nintendo Switch, PC, PlayStation 4, PlayStation 5, Xbox One, Xbox Series S/XGenre(s):Action, Massively Multiplayer, Shooter9VideoGamerSubscribe to our newsletters!By subscribing, you agree to our Privacy Policy and may receive occasional deal communications; you can unsubscribe anytime.Share
    0 Comments 0 Shares 56 Views
  • WWW.ROLLINGSTONE.COM
    FaceBook and Instagram to unleash AI-generated users no one asked for Meta seems less and less interested in the social aspects of social media
    Since burning through tens of billions of dollars on its flop metaverse concept and laying off thousands in the aftermath of that gamble, tech giant Meta has strained to reinvent itself as a company poised to capitalize on the overhyped AI revolution. Last year, for example, founder and CEO Mark Zuckerberg unveiled animated AI chatbots modeled as alter egos of celebrities including Snoop Dogg, MrBeast, Paris Hilton, and Kendall Jenner. But licensing the voices and likenesses of famous people did little to endear Meta to the younger demographics it wants to turn into loyal users of Facebook and Instagram. It junked the bots widely ridiculed as creepy, corny, and without real purpose less than a year later. This move coincided with the debut of its AI Studio, where users can create their own chatbots, including wholly fictional characters or, in the case of popular creators who want followers to feel more connected, an AI that can message with your audience on your behalf, mimicking your tone and expressions. Now, Meta is planning to take the next step: integrating these AI creations as Facebook and Instagram users in themselves. As reported by the Financial Times, the hope is that these semi-independent custom avatars will prove more engaging to the young people who are crucial to the survival of Metas flagship social networks. We expect these AIs to actually, over time, exist on our platforms, kind of in the same way that accounts do, Connor Hayes, Metas vice-president of product for generative AI, told FT. Theyll have bios and profile pictures and be able to generate and share content powered by AI on the platform...thats where we see all of this going.The prospect seems an unusual one for websites predicated on the idea of human-to-human interaction. While Metas other AI offerings, including photo-editing tools, a ChatGPT-like text bot, and forthcoming software for producing AI-generated video, have more readily obvious appeal, its far from certain that an Instagram or Facebook populated by virtual apparitions would prove enticing to newcomers or satisfying for long-time users. Meta revealed to FT that users have created hundreds of thousands of characters since AI Studio launched in July, but that most of them remain private. The company declined to comment further to Rolling Stone. Whatever the reaction, such a change to the fundamental structure of Metas platforms could be transformative. Recent months have brought a wave of alarm about our growing attachments to AI, from student overreliance on it in the classroom and its ability to spread inappropriate content or dangerous misinformation to a recent lawsuit from a mother of a teen who claims his intimate involvement with a Character.AI bot led to his suicide. That company did not comment on the pending litigation but told CNN that it was heartbroken by the tragic loss of one of our users. (AI dating programs are a burgeoning business particularly fraught with emotional hazard.)The envisioned change also comes at a time when Facebook in particular is dominated by AI-generated spam images commonly referred to as slop. These pictures range from visually attractive though nonexistent landscapes and houses to depictions of babies, soldiers, the American flag, and Jesus Christ, presumably meant to evoke a response from older and conservative-leaning audience. This low-effort engagement farming allows the individuals posting the images many of them in the Global South to monetize the pages or sell related merchandise. Through payments to content creators who develop large followings for slop, Meta effectively incentivizes the content.Some of that engagement no doubt comes from spam bots, which are automated to like, share, and comment on posts in order to drive interactions. But the implications of a Facebook where the majority of the activity is bots bouncing off one another are hard to grasp, even at a moment when artificially gamed exchanges are common on the social network. Behind all this, Meta has been working to streamline its path to AI leadership while steadily rolling out more AI features to its 3 billion monthly active users. In January, Zuckerberg announced the merger of its Fundamental AI Research (FAIR) division with its GenAI product team, saying the move would accelerate their work in this field and was an important step on the way to creating a so-called artificial general intelligence. An AGI is a hypothetical autonomous system capable of teaching itself and surpassing human intelligence.Experts told Rolling Stone at the time that such a breakthrough is still rather far-fetched, while Metas efforts to leverage user data in order to engineer its AI tech posed significant privacy risks. They also questioned Zuckerbergs promise of transparency in the process and goal of responsibly open-sourcing an AGI making the code available to the public noting that Meta has offered little insight into its existing models and there is no real framework for safely releasing the blueprint for an (as yet theoretical) AGI. All told, then, the latest AI spin from Meta sounds like more of the same: a mix of vague hype, dubious business models, and a baffling sense of what people really want from a social media network. If, in a few years, Instagram and Facebook are just places for AI bots to hang out, it stands to reason that the humans may find other ways to communicate.
    0 Comments 0 Shares 59 Views
  • WWW.FORBES.COM
    3 Unsustainable Habits To Leave Behind In 2024
    Old Habits - New Habits signpost gettyThe world is at a critical juncture. Climate change and unsustainable consumption habits demand urgent attention. As we approach 2025, it may be time to address three unsustainable practices that should be abandoned, and bring to the forefront, practical solutions for entrepreneurs, policymakers, and individuals for impactful changes.Leave Overconsumption of Fast Fashion In 2024Fast fashion, a business model emphasizing rapid production of low-cost, trend-driven clothing, has significant environmental consequences and its overconsumption should be left in 2024. According to Earth.Org, this disposable approach to fashion generates approximately 92 million tons of textile waste globally each yeara figure projected to rise to 134 million tons annually by 2030. Cheap, trendy clothing may appear harmless, but unbeknownst to many, its environmental toll is staggering. The industry, notorious for its rapid production cycles and low-cost trends, contributes to overflowing landfills, water pollution, and climate-altering emissions. According to the UN Environment Program, fashion is the second-largest global consumer of water, with 93 billion cubic meters used annuallyenough to sustain about 5 million people. Additionally, carbon emissions from the industry surpass those of aviation and shipping combined, driven by the energy-intensive production of synthetic fibers and global transport networks. Microplastics, released from washing synthetic textiles, now account for 35% of the microplastics polluting our oceans, according to a 2017 study by the Global Marine and Polar Program. These sobering figures highlight the urgent need to shift consumer habits and hold brands accountable for sustainable practices, as the cost of fast fashion extends far beyond its price tags and trendy looks.People visit the XR Guerrilla Fashion's protest in Utrecht's Griftpark that showcased a ... [+] 7,000-garment installation by Pet van de Luijtgaarden, highlighting the global fight against fast fashion.Middle East Images/AFP via Getty ImagesAddressing the environmental devastation caused by fast fashion demands bold and immediate action. Consumers must embrace a "buy less, buy better" philosophy, prioritizing quality over quantity and supporting sustainable, ethically produced brands. Simple actions like repairing clothes, participating in clothing swaps, and choosing secondhand options can significantly reduce waste. However, the burden cannot rest on consumers alone. Corporations must be held accountable for transparency, fair labor, and sustainable supply chains. Education is keyraising awareness about fast fashion's true cost can shift cultural attitudes and inspire more responsible choices by consumers.Leave Single-Use Plastics In 2024The fight against single-use plastics has gained significant momentum worldwide, with particular focus on reducing reliance on plastic bags. According to a report by UN Environment and WRI, by July 2018, 127 of the 192 countries reviewed had implemented legislation addressing plastic bags. These measures vary widely, from comprehensive bans in nations like Jamaica to gradual phase-out strategies adopted in Moldova and Uzbekistan. Other countries, such as Romania and Vietnam, have introduced policies that encourage the use of reusable alternatives, signaling a growing commitment to reducing plastic waste globally.MORE FOR YOUActivists take part in a rally pushing for rejecting single-use plastic products in Jakarta, ... [+] Indonesia on July 24, 2022.NurPhoto via Getty ImagesThe worlds addiction to plastic has created an environmental crisis of staggering proportions. According to The Round Up, 400 million metric tons of plastic waste are generated annually, yet only 18% is recycled, leaving the majority to accumulate in landfills, ecosystems, and oceans. Each year, 10 million tons of plastic enter our oceans, contributing to the estimated 5.25 trillion pieces already polluting marine environments. Much of this waste originates from major producers like China, which accounts for 32% of global production, and the United States, which generates 42 million tons annually, the highest of any country. The sale of 50 billion plastic water bottles annually in the U.S., as highlighted by The Round Up, exemplifies the single-use culture driving this crisis. While nations like India recycle up to 60% of their plastic, most countries lag far behind, underscoring the urgent need for systemic global solutions to address this escalating catastropheTOPSHOT - A man on a boat collects recyclable plastics from the heavily polluted Citarum River at ... [+] Batujajar in Bandung, West Java, on June 12, 2024. (Photo by TIMUR MATAHARI / AFP) (Photo by TIMUR MATAHARI/AFP via Getty Images)AFP via Getty ImagesTo truly address the escalating crisis of plastic pollution, a multifaceted and unified global approach is essential. Policymakers must go beyond piecemeal bans and phase-outs, implementing comprehensive frameworks that target the entire lifecycle of plasticsfrom production to disposal. Investment in research and development of biodegradable alternatives, coupled with incentives for industries to adopt sustainable packaging solutions, can help shift reliance away from single-use plastics. Public awareness campaigns should be intensified to educate consumers about the environmental cost of plastic dependency and encourage behavioral changes, such as the use of reusable items and proper recycling practices.Meanwhile, corporate accountability must be prioritized, with mandates requiring businesses to adopt circular economy principles, including extended producer responsibility for plastic waste. Additionally, international collaboration is vital to standardize regulations, fund cleanup initiatives, and prevent transboundary plastic waste leakage. This concerted effort is not just a necessity but a responsibility, ensuring a sustainable future for our planet and generations to come.Leave Excessive Energy Consumption In 2024Excessive energy consumption and waste present profound challenges to global sustainability, impacting both the environment and the economy and should be left in 2024. A study conducted by the International Energy Agency revealed that a staggering 66% of global energy production is wasted, underscoring inefficiencies in energy systems across residential, commercial, and industrial sectors. This wastage is not merely a statistical concern but a significant contributor to climate change. For example, in the United Kingdom, 62% of generated energy is rejected, amplifying carbon dioxide (CO2) and methane emissionsmethane being 28 times more potent than CO2 in trapping heat according to Green Match. The environmental repercussions are dire, including rising sea levels, severe weather patterns, and biodiversity loss, alongside the unnecessary exploitation of natural resources like water, minerals, and fossil fuels.Pollution from petrochemical plant on Teeside, UK. (Photo by Ashley Cooper/Construction ... [+] Photography/Avalon/Getty Images)Getty ImagesGlobally, millions of tons of greenhouse gases are released due to wasted energy, with coal emissions alone contributing 14.36 gigatons of CO2 in 2023 according to Green Match. Additionally, inefficiencies in energy systems, such as outdated appliances, poor insulation, and standby consumption, exacerbate energy losses. For example, standby power from electronics, known as phantom energy, contributes to significant costs and emissions. Addressing these inefficiencies through sustainable practices, energy-efficient technologies, energy audits and waste-to-energy solutions is crucial to reducing the global carbon footprint, conserving resources, and mitigating the adverse effects of climate change.Addressing energy waste requires decisive and multifaceted strategies that blend technology, policy, and public action. The adoption of energy-efficient technologies, stricter regulatory frameworks, and sustainable practices such as waste-to-energy systems can pave the way toward a more energy-secure future. Key measures include upgrading outdated appliances to high-efficiency models, improving building insulation to prevent heat loss, and eliminating phantom energy consumption caused by electronics left on standby.Harnessing the potential of smart technologies, such as intelligent meters and thermostats, can empower households and businesses to monitor and optimize energy usage effectively. Shifting to renewable energy sources like solar, wind, and hydropower offers a cleaner alternative to fossil fuels, dramatically reducing carbon emissions. Equally critical is raising public awareness about energy conservation, encouraging responsible habits that collectively make a significant impact.Close Up Of Woman Holding Smart Energy Meter In Living room Measuring Energy EfficiencygettyTargeted efforts in regions with the highest energy inefficiencies can yield substantial benefits, ensuring that resources are directed where they are needed most.Farewell 2024: Sustainable Habits to Define 2025The journey to sustainability begins with each of us as we leave certain unsustainable habits in 2024. The unsustainable habits of fast fashion, single-use plastics, and excessive energy consumption are pressing challengesbut they also present immense opportunities for change. Rethinking how we consume, demanding accountability from corporations, and advocating for systemic reforms, can collectively pave the way for a healthier planet.Entrepreneurs, policymakers, and individuals have the power to make meaningful impacts by prioritizing ethical practices, embracing innovation, and fostering environmental stewardship. Every small stepfrom choosing quality fashion, to switching off a lightbuilds momentum toward a sustainable future.As we leave behind unsustainable practices in 2024, let 2025 mark the year we redefine our relationship with the Earth, ensuring that prosperity and progress go hand in hand with preservation and forge a legacy of responsibility and resilience for generations to come.
    0 Comments 0 Shares 57 Views
  • WWW.TECHSPOT.COM
    TechSpot Rewind: The 25 most-read tech stories of 2024
    Recap: The tech world is in constant flux, but some stories capture our collective imagination more than others. As we look back at 2024, this TechSpot Rewind countdown is more than just a list it's a snapshot of the ideas, technologies, and controversies that shaped the year. From Intel's CPU woes to the return of optical discs, with some security exploits and quantum-powered navigation stories in-between, this collection highlights the stories that you, our readers, couldn't stop clicking, debating, and sharing.#25 GPS-free navigation nears reality with quantum breakthroughIntegrated photonic chips enable compact, low-cost quantum navigationToday's typical navigation-grade motion sensors are about the size of a grapefruit, helping steer ships, planes, and vehicles in conjunction with GPS signals. This means they always need satellite connectivity to function, but a new breed of "quantum compass" could eventually let us ditch the satellites entirely.#24 Intel's crashing CPU crisis deepens as more models are affected than originally thoughtThe issue extends beyond enthusiast chips, hinting at a more complex root causeIntel probably thought the worst was behind them after the company identified the source of the instability surrounding its 13th- and 14th-gen CPUs and promised a patch to address the issue. But new reports say that the patch won't resolve the problems for processors already experiencing crashes. Even worse, whatever the problem is, it affects a broader range of models than previously assumed.#23 Face it, there is nothing that can replace COBOLAnd don't hang your hope on generative AI, at least not yetCOBOL is decades old yet it still dominates our IT ecosystem and even the economy. But a replacement must be found, if only because the number of developers that can work on the language is dwindling. Is AI the answer?#22 Remember AMI BIOS? Turns out there's a buried treasure in firmwareYou might also remember them from their "American Megatrends" BIOS daysFirmware is one of those obscure areas of computing that is simultaneously critical yet largely ignored. Not coincidentally, we have been doing a lot of work lately digging around such dark corners of the industry. Despite the ubiquitous nature of firmware, almost no one talks about it much.#21 Could Broadcom buy Intel?Can Broadcom afford a deal of this size? The obvious answer is, yesImagine your company has a supplier that has gone through some hard times. Management made some bad decisions years ago, the company struggled, lost its way in the market. Then that vendor got a new CEO who pledged to turn the company around, fix their operations, make their products more competitive. Nobody knows if they can really turn it around, but as a customer, you have better knowledge about how they are doing. Their sales people are calling regularly, showing off their latest products. Would you buy their stock? The SEC might have something to say about that, but what if instead of buying stock in the company you buy the whole company?#20 AI can see what's on your screen by reading HDMI electromagnetic radiationResearchers say the technique is already being used in the wildSecurity researchers have demonstrated that it's possible to spy on what's visible on your screen by intercepting electromagnetic radiation from video cables with great accuracy, thanks to artificial intelligence. The team from Uruguay's University of the Republic says their AI-powered cable-tapping method is good enough that these attacks are likely already happening.#19 Former Google CEO blames work-from-home policy for company lagging behind OpenAIEric Schmidt also praised Elon Musk and TSMC's work cultureAs artificial intelligence companies race ahead in their development of generative AI technology, Google is being left behind by the likes of OpenAI and Anthropic. According to former Google CEO Eric Schmidt, the reason for this is simple: his former company prioritizes working from home and flexible hours for its employees.#18 Mystery of LG washing machine using 3.6GB of data daily could have a simple explanationAnd it's not Bitcoin launderingIn what could have been another example of the dangers of making every single household appliance internet-connected, the owner of an LG washing machine got a shock this week when the device started reporting the use of 3.6GB of data every day.#17 Valve confirms your Steam account cannot be transferred to anyone after you dieYour Steam games will go to the grave with youSince its inception more than two decades ago, Steam has become the go-to game distribution platform for PC gamers with more than 132 million monthly active users, according to the latest data. Unfortunately for all these gamers, they won't be able to hand down their Steam library to anyone when they die.#16 NZXT responds to damning Gamers Nexus video accusing it of running a "predatory, evil" rental scam"We are aware of the recent claims made against us"NZXT has responded to a damning video from YouTube channel Gamers Nexus that accuses the PC hardware giant of running a "predatory, evil rental computer scam." The program in question is its Flex subscription-based service for desktop PCs, which GN says uses "bait and switch" tactics. There are other accusations, too, including faked benchmarks and aggressive terms.#15 Valve makes more money per employee than Amazon, Microsoft, and Netflix combinedA small but mighty team of 400Valve is one of the most important and influential companies in the PC gaming market. It's also one of the most unique due to its private nature and unusually small workforce relative to its impact and competitors. A recent analysis of data uncovered through an ongoing lawsuit against the company highlights how Valve starkly contrasts with the world's biggest tech giants.#14 Amazon and other retailers are being investigated for selling illegal wireless signal jammersThe sale and use of frequency jammers is prohibitedAmazon and other retailers are being investigated by the FCC over allegations that they market and sell unlawful electronic devices designed to block or disrupt signals sent by other electronics. It follows an investigation into the sale of radio frequency jammers, which are advertised as drone deterrents or privacy tools.#13 New charging algorithm could double life of li-ion batteriesThe new algorithm could greatly reduce the ageing effects of continuous recharge cyclesDespite being one of the most practical and effective technologies for storing and delivering electric energy, lithium-ion batteries have started to show their limits. Scientists are looking for alternative materials and energy storage solutions, but researchers now say they can make li-ion batteries work better and for extended periods.#12 These apps track your driving habits and sell that information to insurance companiesSome are seemingly innocent-looking apps like mileage trackersMany were surprised to learn that connected vehicles collect data about drivers and sell that information to insurance companies. As it turns out, so do apps on a driver's smartphone. Most drivers are unaware that this is even happening.#11 Windows 11 24H2 is now incompatible with USB scanning devices, tooHow are so many bugs getting past thousands of beta testers?Windows 11 24H2 increasingly shows how the Windows Insider program does nothing to improve Windows security and reliability. The number of show-stopper bugs experienced by customers who updated to the latest OS version is staggering. Meanwhile, Microsoft is just saying that they're working on (yet another) fix with no specific release date in sight.#10 Wild human washing machine promises to rinse you clean in 15 minutesThe capsule even sets water temps based on your vitalsBack in 1970, a futuristic "human washing machine" called the Ultrasonic Bath caused a sensation at the Japan World Exposition. The egg-shaped pod was developed and exhibited by Sanyo Electric Co., now known as Panasonic Holdings Corp. When someone climbed inside, it would automatically fill with hot water, blast them with ultrasound waves, and release massage balls to knead their body. Over 50 years later, this peculiar invention is making a comeback with a high-tech upgrade.#9 RFID cards could turn into a global security mess after discovery of hardware backdoorPoking at bad encryption practices to discover some outrageous, unexpected issuesChinese-made chips used in popular contactless cards contain hardware backdoors that are easy to exploit. These chips are compatible with the proprietary Mifare protocol developed by Philips spin-off NXP Semiconductors and are inherently "intrinsically broken," regardless of the card's brand.#8 Zero regrets: Firefox power user kept 7,500 tabs open for two yearsFirefox fan's 7,500 simultaneous tabs show browser's memory efficiencyFor most of us, having more than a couple dozen browser tabs open at once feels like a cluttered nightmare. But for one software engineer, managing nearly 7,500 active Firefox tabs is just another day at the office.#7 Massive leak exposes 26 billion records in mother of all breachesIt includes data from Twitter, Dropbox, and LinkedInResearchers have discovered a database composed of stolen user credentials and personally identifiable information (PII) so large that it's been dubbed the mother of all breaches (MOAB). The dataset contains no fewer than 26 billion records, making up 12TB of data from sites including Twitter/X, LinkedIn, Weibo, Tencent, and more.#6 Facebook will soon use your posted content to train its AI, and opting out isn't easyMeta likely made the process arduous for a reasonFacebook will soon become the latest platform to utilize posts and photos from its users to train its AI models. People can opt out, but Meta appears to have made the process intentionally difficult and cumbersome. It's also prone to failure.#5 Samsung launches a 114-inch Micro LED TV so expensive, buyers receive a free $8,000 8K TVYou also get a discount on speakers and a free $2,200 hotel staySamsung has launched a new television aimed squarely at those for whom money is no object. Measuring 114 inches and packing Micro LED technology, the "ultra-premium" set costs the equivalent of around $132,630. It's so expensive that Samsung is giving away an 8K TV worth $8,000 as an incentive to buyers.#4 A 13-year-old is the first human to beat TetrisNumerous theoretical milestones remainTetris is not designed to be beaten. Throughout the game's history of nearly 40 years, people simply assumed that it was designed to continue indefinitely until the player lost. However, the evolving professional Tetris scene, striving for previously unattainable levels, eventually pushed the game's code to its limits.#3 Two mines in North Carolina are the world's only producer of the quartz necessary for semiconductor manufacturingIf they were to stop operating, it would mean a few years of catastrophic disruption, says Wharton professor Ethan MollickUltra-high-purity quartz is an essential component to semiconductor chips, and the only places in the world that can meet this need are two mines in a small North Carolina town. The mines' owner, Sibelco, is investing $700 million to expand capacity, but is that enough to keep up with AI-fueled chip demand?#2 All vehicles will be required to have enhanced automated emergency braking by 2029Requirements call for braking at 62 mph, and being able to detect pedestrians at nightThe National Highway Traffic Safety Administration's new automatic emergency braking rule requires automakers to develop and equip vehicles with technology that is currently unavailable. Consumer advocates question whether automakers have enough time, given the five-year window, to develop this technology and ensure it meets rigorous testing standards.#1 New optical storage breakthrough could make CDs relevant againBreakthrough could usher in "ultra-high-density" optical media, but more research is neededIn the new digital age, CDs and DVDs have become relics, replaced by the popularity of streaming and cloud storage. However, scientists think they may have found a way to bring optical disc storage roaring back - with a massive upgrade that massively increases data density.
    0 Comments 0 Shares 58 Views
  • WWW.WSJ.COM
    Taiwan Outperforms as Asias Strongest Market in 2024
    The Taiex index jumped 28% in 2024 as Asian markets broadly gained ground, supported by falling interest rates globally. Rounding up Asias top three major markets
    0 Comments 0 Shares 60 Views
  • ARSTECHNICA.COM
    You can love or hate AI, but its killed crappy 8GB versions of pricey PCs and Macs
    memories You can love or hate AI, but its killed crappy 8GB versions of pricey PCs and Macs Op-ed: AI has been a cure for $1,600 computers that start with 8GB of memory. Andrew Cunningham Dec 30, 2024 7:35 am | 113 Credit: Microsoft Credit: Microsoft Story textSizeSmallStandardLargeWidth *StandardWideLinksStandardOrange* Subscribers only Learn moreI'd describe myself as a skeptic of the generative AI revolutionI think the technology as it currently exists is situationally impressive and useful for specific kinds of tasks, but broadly oversold. I'm not sure it will vanish from relevance to quite the extent that other tech fads like the metaverse or NFTs did, but my suspicion is that companies like Nvidia and OpenAI are riding a bubble that will pop or deflate over time as more companies and individuals run up against the technology's limitations, and as it fails to advance as quickly or as impressively as its most ardent boosters are predicting.Maybe you agree with me and maybe you don't! I'm not necessarily trying to convince you one way or the other. But I am here to say that even if you agree with me, we can all celebrate the one unambiguously positive thing that the generative AI hype cycle has done for computers this year: the RAM floor for many PCs and all Macs is now finally 16GB instead of 8GB.Companies like Apple and Microsoft have, for years, created attractive, high-powered hardware with 8GB of memory in it, most egregiously in $1,000-and-up putative "pro" computers like last year's $1,599 M3 MacBook Pro or the Surface Pro 9.This meant that, for the kinds of power users and professionals drawn to these machines, that their starting prices were effectively mirages; "pay for 16GB if you can" has been my blanket advice to MacBook buyers for years now, since there's basically no workload (including Just Browsing The Web) that won't benefit at least a little. It also leaves more headroom for future software bloat and future hobby discovery. Did you buy an 8GB Mac, and then decide you wanted to try software development, photo or video editing, CAD design, or Logic Pro? Good luck! Microsoft's Surface Laptop 7 is one of the flagship Copilot+ PCs that comes with no less than 16GB of memory. Credit: Andrew Cunningham This wouldn't have been as big an issue in another era of computing, where people could add more memory after the fact if they discovered they needed it later. But soldered-down memory is the norm in most systems, which means paying whatever manufacturers want for RAM up-front, and that you need to guess how much RAM you'll need to stay happy with your system over its entire useful life. Some PC makers would also bundle RAM upgrades with CPU and storage upgrades, imposing hundreds of dollars worth of price increases on people who just wanted more memory. And as someone who has reviewed hardware for years, I'll tell you that the review samples we get from companies are basically never the entry-level models, helping to obscure the shortcomings of the cheaper versions.AI to the rescue?Microsoft's Copilot+ program was announced in May, with the promise of additional locally processed generative AI features that went above and beyond the Copilot chatbot that Microsoft has been pushing aggressively (and changing constantly) for the last two years. To meet the requirements for Copilot+ label and the marketing push behind it, PCs must have a recent high-end processor, at least 16GB of memory, and at least 256GB of storage. The flagship Copilot+ PCMicrosoft's Surface Pro Xhas a higher starting price is higher than the Surface Pro 9's (at least when it's not on sale, which it currently is), but you can at least buy it confident that you'll get a decently capable and future-proof PC.Apple's face-turn on the RAM questionits first bump to the Mac's base amount of RAM in 12 yearsdidn't come tied to any specific feature. All of the Apple Intelligence stuff that has been announced or released so far will work on Macs, iPads, and iPhones with just 8GB of RAM (one Xcode feature briefly required 16GB of RAM over the summer, but Apple dropped that requirement). But the across-the-board upgrade to 16GB came alongside the first wave of Apple Intelligence features, which were all featured prominently in all of Apple's marketing materials for the new models. The M4 Mac mini launched with the first Apple Intelligence features. Getting 16GB of RAM for $599 makes it Apple's best base-model Mac mini ever. Credit: Andrew Cunningham It does at least seem likely, then, that Apple is laying the groundwork for future AI-powered features that either work exclusively on Macs with more RAM, or work best on Macs with more RAM. Whatever the reason, something that had been a flat $200 upgrade to any Mac for years and years was suddenly included in the base price, lowering the prices for all other RAM upgrades by $200 as well.The reason I like a RAM upgrade is that it's broadly useful even if you actively dislike generative AI and plan to try as hard as you possibly can to keep it off of your computers entirely. Adding a better GPU is of limited usefulness if you don't play games; making a CPU faster is likewise not super necessary if all you're doing is browsing or doing hobbyist-level content creation; adding an NPU to a system does basically nothing at all for the vast majority of users at this point. But adding more memory to your system will help with everything you do, even if you're just loading a bunch of basic-but-RAM-hungry web apps and modern webpages in a browser.The 8GB-to-16GB bump doesn't fix things at the low end of the PC market, where most PCs still come with 8GB of memory (and some of the cheapest still come with 4GB). But it is now somewhat less likely that I will buy a $1,200 computer with the same memory capacity as a $500 computer. Given the proliferation of ads, spammy notifications, and other signs of endemic platform rot that Windows users in particular have been dealing with the last few years, I believe this is the kernel of good that comes with the pile of bad.Andrew CunninghamSenior Technology ReporterAndrew CunninghamSenior Technology Reporter Andrew is a Senior Technology Reporter at Ars Technica, with a focus on consumer tech including computer hardware and in-depth reviews of operating systems like Windows and macOS. Andrew lives in Philadelphia and co-hosts a weekly book podcast called Overdue. 113 Comments
    0 Comments 0 Shares 66 Views