Corsair Overhauls Prebuilt, 3-Chamber Airflow Case, & Transparent PSUJune 5, 2025Last Updated: 2025-06-05We take a look at Corsair’s upcoming i600 pre-built PC, Air 5400 case, Frame 4000D prototype, and moreThe HighlightsCorsair’s i600 pre-built PC is a new revision on the company’s i500 and overhauls its GPU cooler and CPU radiatorThe Corsair Air 5400 is an airflow-targeted case that has air ducts on the top and bottom of its chassisCorsair has partnered with Singularity to develop the Frame 4000D prototype, which has an interesting power board that handles cable managementTable of ContentsAutoTOC Grab a GN Tear-Down Toolkit to support our AD-FREE reviews and IN-DEPTH testing while also getting a high-quality, highly portable 10-piece toolkit that was custom designed for use with video cards for repasting and water block installation. Includes a portable roll bag, hook hangers for pegboards, a storage compartment, and instructional GPU disassembly cards.IntroWe visited Corsair’s suite at Computex 2025 and liked some of the stuff the company had to show. Editor's note: This was originally published on May 21, 2025 as a video. This content has been adapted to written format for this article and is unchanged from the original publication.CreditsHostSteve BurkeCamera, Video EditingMike GaglioneVitalii MakhnovetsWriting, Web EditingJimmy ThangCorsair Air 5400Corsair will release its Air 5400, which is an airflow-targeted case. On the back side of the case is a giant hole, which couples with a front-mounted radiator that will allow the case to shove air straight out of it. This design allows it to focus air flow for the GPU entirely from its own set of fans at the bottom of the case. This is probably the most interesting case from Corsair we saw at Computex this year. It should be around $220, though that’s dependent on the everchanging tariff situation. Internally, the Air 5400 has a duct at the bottom where the case has 3x120mm fans (the entire case is actually set up to support all 120mm fans, which simplifies things). The duct is there to guide air into the GPU. Corsair claims that the case is getting about a 1-2 degree improvement with the duct in a like-for-like test. If you do end up with a front radiator, then a potential area that gets abandoned in terms of airflow might be around the VRM area and some of the board components like system memory.  There are mounts for fans up on top of the case along with an additional duct. Looking at the back of the case, there are 2 holes on the back, which is surprising for a 120mm fan. The spacing doesn’t look like it would fit a 120mm fan, but Corsair’s plan is to include a bracket that would adapt a 120mm fan here and would actually cut out into the glass area on the back, which would make you lose about 40% of the fan. This should help but raises some questions about whether it may cause acoustic issues when you partially blast air into a glass wall. Speaking of glass, the Air 5400’s glass is laminated. A couple companies are doing this now. Corsair says this helps the glass stay more put together to prevent shattering. Looking at the back side panel, there’s a big acrylic sheet coupled with an area where air can escape. Opening up the back panel, there’s a huge amount of cable-management depth. You can also see that the motherboard tray is punctured all of the way through. This causes concerns around structural rigidity, but Corsair is using a .8mm thick steel, which helps a little bit here. The company has also strengthened the case’s top panel compared to Corsair’s 4000D case, which received negative feedback in that area. The Air 5400 is set to be priced at $220 with 3x120mm fans included. i600 Grab a GN15 Large Anti-Static Modmat to celebrate our 15th Anniversary and for a high-quality PC building work surface. The Modmat features useful PC building diagrams and is anti-static conductive. Purchases directly fund our work! (or consider a direct donation or a Patreon contribution!)Corsair is updating its i500 pre-built PC, which we hated, with its upcoming i600, and the company has improved it a lot. The i500’s GPU cooling solution had basically no contact with any of the power components. The i600, on the other hand, has massive overhauls here. The case itself has only slightly changed, but the changes made accommodate larger radiators. The block for the video card, including the power components, is totally different in a way that looks promising. The stuff that jumped out to us right away about the i600 is the fin stacks for the VRM, which is connected to a shared copper nickel-plated base plate for the GPU and memory. Everything is connected to the same base plate, which is connected to the liquid cooler. This means all of the heat gets dumped into the liquid cooler. There’s pros and cons to this design. The pro is that all of the other components get cooled better. The downside is that the GPU itself is sharing the heat dissipation capacity with all of the other components in the cooler. This means you typically see some increase in the GPU temperature as a result. There’s ups and downs to this approach. It doesn’t necessarily mean one solution is better than the other as long as it’s all cooled. The i600 has copper bars, which contact the MOSFETs. Otherwise, it’s very similar to the i500. Corsair has also modified its CPU cooler radiator, where the company has moved its tanks off to the side. The tubes are also running in a different direction. Corsair is also moving to 25mm thick fans, where previously they had the slimmer 15mm fans. That extra 10mm will help with pressure and performance a lot. We plan on doing a review of the PC as soon as we buy one.Corsair Frame 4000DWe saw a prototype of Corsair’s Frame 4000D, where the company changed a few things. Corsair partnered with Singularity for its powerboard. It’s somewhat similar to Elmore’s BENCHLAB, with the exception of it not logging power. With the case, you basically run all of the power cables into the power board and then route them to their final locations. We count 10 fan headers here along with a bunch of RGB headers. There’s a lot of possibilities with this. Currently, it’s mostly being used as a cable-management tool, but you could, in theory, expand this to include more switches, like fan-control switches. We would really like to see current monitoring. It would make it more expensive but that could be a potentially useful direction to go in where you could monitor on the 12VHPWR, for instance, which would become a great marketing point for Corsair and would be very useful for end users. The front panel is also different as it has a die-cut edge now.  The power supply setup is also different here with Corsair doing an acrylic wall for the PSU instead of steel. The challenge here is that plastic is an incredibly good insulator. This could raise some ESD (electrostatic discharge) concerns and may cause the PSU to lose some of the shielding that steel provides. As a part of this design, Corsair has customized the caps and PCBs so that they get nice color matching. It looks pretty nice. 3D PrintingCorsair was telling us how for its upcoming 4000D and its Frame series cases, it was getting into 3D printable panels and pieces. They showed us how one Corsair employee 3D printed a shroud-like duct, which takes air in through the bottom and shoves it up into where the pump and reservoir are in the image above. These 3D print files are available on Corsair’s account on Printables.  Corsair 5000DWe didn’t care too much about it but Corsair also showed off its new 5000D that has a screen on it, which is a thing companies are doing now. They also had a 5000D case without the screen, which is a larger variant of the Frame 4000D case. Corsair says that it should be priced around $180, but that’s in flux with the tariffs situation.  Corsair Open Concept Visit our Patreon page to contribute a few dollars toward this website's operation (or consider a direct donation or buying something from our GN Store!) Additionally, when you purchase through links to retailers on our site, we may earn a small affiliate commission.Corsair’s open concept at Computex is using some of the same Frame components, where the company is trying to make the Frame series modular and represents an open frame. There’s also an option for fan mounts as well. The company showed a gigantic radiator tower at the show, which is pretty cool to see.

Email authentication protocols like SPF, DKIM, and DMARC play a critical role in protecting domains from spoofing and phishing. However, when SEGs are introduced into the email path, the interaction with these protocols becomes more complex. Security gateways(SEGs) are a core part of many organizations’ email infrastructure. They act as intermediaries between the public internet and internal mail systems, inspecting, filtering, and routing messages. This blog examines how security gateways handle SPF, DKIM, and DMARC, with real-world examples from popular gateways such as Proofpoint, Mimecast, and Avanan. We’ll also cover best practices for maintaining authentication integrity and avoiding misconfigurations that can compromise email authentication or lead to false DMARC failures. Security gateways often sit at the boundary between your organization and the internet, managing both inbound and outbound email traffic. Their role affects how email authentication protocols behave. An inbound SEG examines emails coming into your organization. It checks SPF, DKIM, and DMARC to determine if the message is authentic and safe before passing it to your internal mail servers. An outbound SEG handles emails sent from your domain. It may modify headers, rewrite envelope addresses, or even apply DKIM signing. All of these can impact SPF,  DKIM, or DMARC validation on the recipient’s side. Understanding how SEGs influence these flows is crucial to maintaining proper authentication and avoiding unexpected DMARC failures. Inbound Handling of SPF, DKIM, and DMARC by Common Security Gateways When an email comes into your organization, your security gateway is the first to inspect it. It checks whether the message is real, trustworthy, and properly authenticated. Let’s look at how different SEGs handle these checks. Avanan (by Check Point) SPF: Avanan verifies whether the sending server is authorized to send emails for the domain by checking the SPF record. DKIM: It verifies if the message was signed by the sending domain and if that signature is valid. DMARC: It uses the results of the SPF and DKIM check to evaluate DMARC. However, final enforcement usually depends on how DMARC is handled by Microsoft 365 or Gmail, as Avanan integrates directly with them. Avanan offers two methods of integration:1. API integration: Avanan connects via APIs, no change in MX, usually Monitor or Detect modes.2. Inline integration: Avanan is placed inline in the mail flow (MX records changed), actively blocking or remediating threats. Proofpoint Email Protection SPF: Proofpoint checks SPF to confirm the sender’s IP is authorized to send on behalf of the domain. You can set custom rules (e.g. treat “softfail” as “fail”). DKIM: It verifies DKIM signatures and shows clear pass/fail results in logs. DMARC: It fully evaluates DMARC by combining SPF and DKIM results with alignment checks. Administrators can configure how to handle messages that fail DMARC, such as rejecting, quarantining, or delivering them. Additionally, Proofpoint allows whitelisting specific senders you trust, even if their emails fail authentication checks. Integration Methods Inline Mode: In this traditional deployment, Proofpoint is positioned directly in the email flow by modifying MX records. Emails are routed through Proofpoint’s infrastructure, allowing it to inspect and filter messages before they reach the recipient’s inbox. This mode provides pre-delivery protection and is commonly used in on-premises or hybrid environments. API-Based (Integrated Cloud Email Security – ICES) Mode: Proofpoint offers API-based integration, particularly with cloud email platforms like Microsoft 365 and Google Workspace. In this mode, Proofpoint connects to the email platform via APIs, enabling it to monitor and remediate threats post-delivery without altering the email flow. This approach allows for rapid deployment and seamless integration with existing cloud email services. Mimecast SPF: Mimecast performs SPF checks to verify whether the sending server is authorized by the domain’s SPF record. Administrators can configure actions for SPF failures, including block, quarantine, permit, or tag with a warning. This gives flexibility in balancing security with business needs. DKIM: It validates DKIM signatures by checking that the message was correctly signed by the sending domain and that the content hasn’t been tampered with. If the signature fails, Mimecast can take actions based on your configured policies. DMARC: It fully evaluates DMARC by combining the results of SPF and DKIM with domain alignment checks. You can choose to honor the sending domain’s DMARC policy (none, quarantine, reject) or apply custom rules, for example, quarantining or tagging messages that fail DMARC regardless of the published policy. This allows more granular control for businesses that want to override external domain policies based on specific contexts. Integration Methods Inline Deployment: Mimecast is typically deployed as a cloud-based secure email gateway. Organizations update their domain’s MX records to point to Mimecast, so all inbound (and optionally outbound) emails pass through it first. This allows Mimecast to inspect, filter, and process emails before delivery, providing robust protection. API Integrations: Mimecast also offers API-based services through its Mimecast API platform, primarily for management, archival, continuity, and threat intelligence purposes. However, API-only email protection is not Mimecast’s core model. Instead, the APIs are used to enhance the inline deployment, not replace it. Barracuda Email Security Gateway SPF: Barracuda checks the sender’s IP against the domain’s published SPF record. If the check fails, you can configure the system to block, quarantine, tag, or allow the message, depending on your policy preferences. DKIM: It validates whether the incoming message includes a valid DKIM signature. The outcome is logged and used to inform further policy decisions or DMARC evaluations. DMARC: It combines SPF and DKIM results, checks for domain alignment, and applies the DMARC policy defined by the sender. Administrators can also choose to override the DMARC policy, allowing messages to pass or be treated differently based on organizational needs (e.g., trusted senders or internal exceptions). Integration Methods Inline mode (more common and straightforward): Barracuda Email Security Gateway is commonly deployed inline by updating your domain’s MX records to point to Barracuda’s cloud or on-premises gateway. This ensures that all inbound emails pass through Barracuda first for filtering and SPF, DKIM, and DMARC validation before being delivered to your mail servers. Deployment Behind the Corporate Firewall: Alternatively, Barracuda can be deployed in transparent or bridge mode without modifying MX records. In this setup, the gateway is placed inline at the network level, such as behind a firewall, and intercepts mail traffic transparently. This method is typically used in complex on-premises environments where changing DNS records is not feasible. Cisco Secure Email (formerly IronPort) Cisco Secure Email acts as an inline gateway for inbound email, usually requiring your domain’s MX records to point to the Cisco Email Security Appliance or cloud service. SPF: Cisco Secure Email verifies whether the sending server is authorized in the sender domain’s SPF record. Administrators can set detailed policies on how to handle SPF failures. DKIM: It validates the DKIM signature on incoming emails and logs whether the signature is valid or has failed. DMARC: It evaluates DMARC by combining SPF and DKIM results along with domain alignment checks. Admins can configure specific actions, such as quarantine, reject, or tag, based on different failure scenarios or trusted sender exceptions. Integration methods On-premises Email Security Appliance (ESA): You deploy Cisco’s hardware or virtual appliance inline, updating MX records to route mail through it for filtering. Cisco Cloud Email Security: Cisco offers a cloud-based email security service where MX records are pointed to Cisco’s cloud infrastructure, which filters and processes inbound mail. Cisco Secure Email also offers advanced, rule-based filtering capabilities and integrates with Cisco’s broader threat protection ecosystem, enabling comprehensive inbound email security. Outbound Handling of SPF, DKIM, and DMARC by Common Security Gateways When your organization sends emails, security gateways can play an active role in processing and authenticating those messages. Depending on the configuration, a gateway might rewrite headers, re-sign messages, or route them through different IPs – all actions that can help or hurt the authentication process. Let’s look at how major SEGs handle outbound email flow. Avanan – Outbound Handling and Integration Methods Outbound Logic Avanan analyzes outbound emails primarily to detect data loss, malware, and policy violations. In API-based integration, emails are sent directly by the original mail server (e.g., Microsoft 365 or Google Workspace), so SPF and DKIM signatures remain intact. Avanan does not alter the message or reroute traffic, which helps maintain full DMARC alignment and domain reputation. Integration Methods 1. API Integration: Connects to Microsoft 365 or Google Workspace via API. No MX changes are needed. Emails are scanned after they are sent, with no modification to SPF, DKIM, or the delivery path.  How it works: Microsoft Graph API or Google Workspace APIs are used to monitor and intervene in outbound emails. Protection level: Despite no MX changes, it can offer inline-like protection, meaning it can block, quarantine, or encrypt emails before they are delivered externally. SPF/DKIM/DMARC impact: Preserves original headers and signatures since mail is sent directly from Microsoft/Google servers. 2. Inline Integration: Requires changing MX records to route email through Avanan. In this mode, Avanan can intercept and inspect outbound emails before delivery. Depending on the configuration, this may affect SPF or DKIM if not properly handled. How it works: Requires adding Avanan’s Protection level: Traditional inline security with full visibility and control, including encryption, DLP, policy enforcement, and advanced threat protection. SPF/DKIM/DMARC impact: SPF configuration is needed by adding Avanan’s include mechanism to the sending domain’s SPF record. The DKIM record of the original sending source is preserved. For configurations, you can refer to the steps in this blog. Proofpoint – Outbound Handling and Integration Methods Outbound Logic Proofpoint analyzes outbound emails to detect and prevent data loss (DLP), to identify advanced threats (malware, phishing, BEC) originating from compromised internal accounts, and to ensure compliance. Their API integration provides crucial visibility and powerful remediation capabilities, while their traditional gateway (MX record) deployment delivers true inline, pre-delivery blocking for outbound traffic. Integration methods 1. API Integration: No MX record changes are required for this deployment method. Integration is done with Microsoft 365 or Google Workspace. How it works: Through its API integration, Proofpoint gains deep visibility into outbound emails and provides layered security and response features, including: Detect and alert: Identifies sensitive content (Data Loss Prevention violations), malicious attachments, or suspicious links in outbound emails. Post-delivery remediation (TRAP): A key capability of the API model is Threat Response Auto-Pull (TRAP), which enables Proofpoint to automatically recall, quarantine, or delete emails after delivery. This is particularly useful for internally sent messages or those forwarded to other users. Enhanced visibility: Aggregates message metadata and logs into Proofpoint’s threat intelligence platform, giving security teams a centralized view of outbound risks and user behavior. Protection level: API-based integration provides strong post-delivery detection and response, as well as visibility into DLP incidents and suspicious behavior.  SPF/DKIM/DMARC impact: Proofpoint does not alter SPF, DKIM, or DMARC because emails are sent directly through Microsoft or Google servers. Since Proofpoint’s servers are not involved in the actual sending process, the original authentication headers remain intact. 2. Gateway Integration (MX Record/Smart Host): This method requires updating MX records or routing outbound mail through Proofpoint via a smart host. How it works: Proofpoint acts as an inline gateway, inspecting emails before delivery. Inbound mail is filtered via MX changes; outbound mail is relayed through Proofpoint’s servers. Threat and DLP filtering: Scans outbound messages for sensitive content, malware, and policy violations. Real-time enforcement: Blocks, encrypts, or quarantines emails before they’re delivered. Policy controls: Applies rules based on content, recipient, or behavior. Protection level: Provides strong, real-time protection for outbound traffic with pre-delivery enforcement, DLP, and encryption. SPF/DKIM/DMARC impact: Proofpoint becomes the sending server: SPF: You need to configure ProofPoint’s SPF. DKIM: Can sign messages; requires DKIM setup. DMARC: DMARC passes if SPF and DKIM are set up properly. Please refer to this article to configure SPF and DKIM for ProofPoint. Mimecast – Outbound Handling and Integration Methods Outbound Logic Mimecast inspects outbound emails to prevent data loss (DLP), detect internal threats such as malware and impersonation, and ensure regulatory compliance. It primarily functions as a Secure Email Gateway (SEG), meaning it sits directly in the outbound email flow. While Mimecast offers APIs, its core outbound protection is built around this inline gateway model. Integration Methods 1. Gateway Integration (MX Record change required) This is Mimecast’s primary method for outbound email protection. Organizations route their outbound traffic through Mimecast by configuring their email server (e.g., Microsoft 365, Google Workspace, etc.) to use Mimecast as a smart host. This enables Mimecast to inspect and enforce policies on all outgoing emails in real time. How it works: Updating outbound routing in your email system (smart host settings), or Using Mimecast SMTP relay to direct messages through their infrastructure. Mimecast then scans, filters, and applies policies before the email reaches the final recipient. Protection level: Advanced DLP: Identifies and prevents sensitive data leaks. Impersonation and Threat Protection: Blocks malware, phishing, and abuse from compromised internal accounts. Email Encryption and Secure Messaging: Applies encryption policies or routes messages via secure portals. Regulatory Compliance: Enforces outbound compliance rules based on content, recipient, or metadata. SPF/DKIM/DMARC impact: SPF: Your SPF record must include Mimecast’s SPF mechanism based on your region to avoid SPF failures. DKIM: A new DKIM record should be configured to make sure your emails are DKIM signed when routing through Mimecast. DMARC: With correct SPF and DKIM setup, Mimecast ensures DMARC alignment, maintaining your domain’s sending reputation. Please refer to the steps in this detailed article to set up SPF and DKIM for Mimecast. 2. API Integration (Complementary to Gateway) Mimecast’s APIs complement the main gateway by providing automation, reporting, and management tools rather than handling live outbound mail flow. They allow you to manage policies, export logs, search archived emails, and sync users. APIs enhance visibility and operational tasks but do not provide real-time filtering or blocking of outbound messages. Since APIs don’t process live mail, they have no direct effect on SPF, DKIM, or DMARC; those depend on your gateway (smart host) setup. Barracuda – Outbound Handling and Integration Methods Outbound Logic Barracuda analyzes outbound emails to prevent data loss (DLP), block malware, stop phishing/impersonation attempts from compromised internal accounts, and ensure compliance. Barracuda offers flexible deployment options, including both traditional gateway (MX record) and API-based integrations. While both contribute to outbound security, their roles are distinct. Integration Methods 1. Gateway Integration (MX Record / Smart Host) — Primary Inline Security How it works: All outbound emails pass through Barracuda’s security stack for real-time inspection, threat blocking, and policy enforcement before delivery. Protection level: Comprehensive DLP (blocking, encrypting, or quarantining sensitive content)  Outbound spam and virus filtering  Enforcement of compliance and content policies This approach offers a high level of control and immediate threat mitigation on outbound mail flow. SPF/DKIM/DMARC impact: SPF: Update SPF records to include Barracuda’s sending IPs or SPF include mechanism. DKIM: Currently, no explicit setup is needed; DKIM of the main sending source is preserved. Refer to this article for more comprehensive guidance on Barracuda SEG configuration. 2. API Integration (Complementary & Advanced Threat Focus) How it works: The API accesses cloud email environments to analyze historical and real-time data, learning normal communication patterns to detect anomalies in outbound emails. It also supports post-delivery remediation, enabling the removal of malicious emails from internal mailboxes after sending. Protection level: Advanced AI-driven detection and near real-time blocking of outbound threats, plus strong post-delivery cleanup capabilities. SPF/DKIM/DMARC impact: Since mail is sent directly by the original mail server (e.g., Microsoft 365), SPF and DKIM signatures remain intact, preserving DMARC alignment and domain reputation. Cisco Secure Email (formerly IronPort) – Outbound Handling and Integration Methods Outbound Logic Cisco Secure Email protects outbound email by preventing data loss (DLP), blocking spam and malware from internal accounts, stopping business email compromise (BEC) and impersonation attacks, and ensuring compliance. Cisco provides both traditional gateway appliances/cloud gateways and modern API-based solutions for layered outbound security. Integration Methods 1. Gateway Integration (MX Record / Smart Host) – Cisco Secure Email Gateway (ESA) How it works: Organizations update MX records to route mail through the Cisco Secure Email Gateway or configure their mail server (e.g., Microsoft 365, Exchange) to smart host outbound email via the gateway. All outbound mail is inspected and policies enforced before delivery. Protection level: Granular DLP (blocking, encrypting, quarantining sensitive content) Outbound spam and malware filtering to protect IP reputation Email encryption for sensitive outbound messages Comprehensive content and attachment policy enforcement SPF: Check this article for comprehensive guidance on Cisco SPF settings. DKIM: Refer to this article for detailed guidance on Cisco DKIM settings. 2. API Integration – Cisco Secure Email Threat Defense How it works: Integrates directly via API with Microsoft 365 (and potentially Google Workspace), continuously monitoring email metadata, content, and user behavior across inbound, outbound, and internal messages. Leverages Cisco’s threat intelligence and AI to detect anomalous outbound activity linked to BEC, account takeover, and phishing. Post-Delivery Remediation: Automates the removal or quarantine of malicious or policy-violating emails from mailboxes even after sending. Protection level: Advanced, AI-driven detection of sophisticated outbound threats with real-time monitoring and automated remediation. Complements gateway filtering by adding cloud-native visibility and swift post-send action. SPF/DKIM/DMARC impact: Since emails are sent directly by the original mail server, SPF and DKIM signatures remain intact, preserving DMARC alignment and domain reputation. If you have any questions or need assistance, feel free to reach out to EasyDMARC technical support.

Nailing cross-channel marketing for your app is crucial in today’s ecosystem. This isn’t just a speculation, it’s a hard fact: the average mobile marketer uses 5 or fewer media sources, but CPIs tend to be much higher for marketers using 6 or more media sources, according to a report by Singular and ironSource Aura.It’s time to start looking elsewhere for users. Something to consider is returning to old-school, tried-and-true strategies that have taken a backseat as the industry has advanced, such as web acquisition campaigns. There are two clicks in these campaigns - the first click directs users from an ad to a web landing page and the second click directs users from the web page to the app store. While the funnel to get to your app is longer, it’s actually an opportunity. Let’s dive into why and how you should be running web-to-app acquisition campaigns.3 benefits of web-to-app campaignsWeb acquisition campaigns became tried-and-true for a reason and many apps are beginning to take advantage of the strategy to reduce costs, get better visibility, and expand their reach.Reduce costsWhile the cost of app acquisition campaigns is increasing as the space becomes more saturated, web campaigns have been underutilized in recent years. This means many advertisers are finding that the cost of web campaigns are less than app store acquisitions. Much of these higher costs comes from high app store fees - Apple takes a 30% cut from large developers and a 15% cut from smaller developers. The web remains a relatively low-cost, accessible channel.Get better visibilityWith the ability to direct users to your owned mobile site before they click to download your app, you get better visibility into new users and where they came from - the app store is a black box where it’s nearly impossible to match the user who clicked an ad to the user who downloaded your app. On top of that, longer funnels give you more control and insight into each step users take to get to your app - allowing you to better optimize your campaigns. For example, you can try out different web landing pages to find the most effective way to increase users’ understanding of your app before they download it. This increases your likelihood of, first, motivating users to download your app, and second, encouraging them to stick around.Expand your reachInternet users worldwide spent 415.5 minutes a day online in 2021 according to Oberlo. App users spend at most 300 mins a day in apps according to TechCrunch. The internet is still more prevalent than apps because, let’s face it, the web predates the app store. Even more so, users have become especially savvy on the web, visiting the search bar to research a brand, fact check a friend, or dive deeper into a news headline. This means that by running web campaigns, you’re reaching a massive audience - nearly the entire world population.Andre Kempe, Founder and CEO of Admiral Media says, “marketers consider web acquisition important because they’re reaching a different type of audience that may convert to becoming an active app user, even though they were surfing on a news website… When you start advertising for the web, you reach an audience you haven’t reached before. This is definitely a growth opportunity." Listen to the full podcast.Web campaigns are a tried and true strategy, which is what makes them so effective in today’s ecosystem. Realizing that you should be considering this acquisition channel, let’s discuss how web onboarding can help you maximize success.Maximize success with web onboardingTypically, users complete onboarding directly on your app. Web onboarding, however, means letting users register, subscribe, and sometimes pay on the web, before heading to your app. This way, users are fully prepared to start using your app before even clicking download, ensuring they can engage at full capacity as soon as download is complete.When users onboard through the app, they may not immediately decide to engage but at least the app is still on their phones reminding them everyday of its value - they’re likely to open it again at some point in time. When a user onboards on the web and decides your app isn’t valuable, they’ll never end up actually downloading it - it’s gone and forgotten before it even started. That said, with web onboarding, the users who end up downloading your app will do so with high-intent to actively engage. Plus, you don’t have to pay for users that download without ever engaging. Whatever category your app is - fitness, food delivery, dating, reading, learning, etc. - you can use the web touchpoint to drive quality users to your app.Ensure the transition is seamlessFirst, ensure the web experience mimics the app experience enough that users don’t feel jipped when they actually start using your app. The transition from the web to the app should be seamless. If you’re offering users a taste of your app, the web touchpoint should look exactly like your app or, at least, include all of the same features. If the buttons to adjust settings are on the right side of the page during onboarding, they should be on the right side in the app as well. To ensure users stick around, you have to give them what they signed up for.Give users a sneak peakYou should also determine your main selling point and give users a sneak peak. For example, if you’re a reading app that allows users to adjust the settings of the page, you could give users premium access to the first chapter of a book allowing them to adjust font size or brightness. Readers will not want to leave the experience behind, encouraging them to set up their subscription and input their credit card information on the web before heading to the app to continue reading the book. The best part - when they open your app for the first time they’ll be able to jump right into the app experience.Learn more about how to improve your app’s onboarding experienceWeb-to-app campaigns should not be ignored in this competitive landscape - lower costs, more visibility, better optimization, and strong reach. Going even further to onboard users through the web, you’re improving the quality of the users entering your app for the first time.

Science & technology | ScrollytellingHow old are the Dead Sea Scrolls? An AI model can help Scientists are using it to estimate the age of ancient handwriting Sensitive subjectPhotograph: Israel Antiquities Authority/Shai Halevi Jun 5th 2025EVER SINCE the Dead Sea Scrolls were discovered by Bedouin shepherds in the 1940s, debate has raged over their exact age. The scrolls, which contain the earliest surviving copies of books from the Hebrew Bible and other religious texts, mostly written in Aramaic and Hebrew, are thought to have been compiled sometime between 300BC and 200AD. Dating each of the 1,000-odd individual scrolls would help historians understand how literacy spread among ancient Jewish populations and the first Christians, and offer a valuable window into the genesis of the sacred texts. But scholars hoping to do so have had little but their own intuition to rely on.Explore moreThis article appeared in the Science & technology section of the print edition under the headline “Scrollytelling”From the June 7th 2025 editionDiscover stories from this section and more in the list of contents⇒Explore the editionReuse this content

ZDNET's key takeaways The Eufy E28 robot vacuum, mop, and spot cleaner combination is available for $999.The mop performs better than more expensive flagships, and the water tank system doubles as a portable spot cleaner with a self-cleaning hose.Unplugging the spot cleaner also unplugs the charging station, and the spot cleaner requires you to brush it to scrub. more buying choices The Eufy E28 Omni robot vacuum and mop just hit its lowest price ever at $850, a total of $450 off with an on-page Amazon coupon.Robot vacuum manufacturers are constantly trying to outdo one another. One company develops a detachable cordless vacuum for the robot's dock, and the next makes the robot's dustbin a detachable cordless vacuum. Now, Eufy is upping the ante with the first robot vacuum to also have a detachable spot cleaner for carpet and upholstery. Also: Finally, I found a robot and handheld vacuum combo that's ideal for apartment dwellersThe Eufy Omni E28 is a robot vacuum and mop with a portable spot cleaner for carpets and upholstery. You can run your robot vacuum as you would any other, but you can also pick up the top with a built-in retractable handle and do some deep cleaning on carpets, rugs, or upholstery. I've been testing this robot vacuum over the past couple of weeks, and I'm happy to report on its performance.  details View at Amazon Essentially, the deep cleaner you carry is the Omni station's clean and dirty water tank, so it's where the robot autonomously sources clean water for its mop when it's at the dock. The deep cleaner has a handle for spot-cleaning with a hose, so you can set it down near where you want to clean and plug it in without holding it as you clean. Aside from detachable cordless vacuums, a mop roller system is another big thing for robot vacuums; many makers, including SwitchBot, Yeedi, and Ecovacs, are moving away from detachable rotating mop pads and using mop rollers instead. Eufy's also done this before with the flagship S1 Pro.  Maria Diaz/ZDNETThe Omni E28 also has a mop roller, which looks similar to the S1 Pro but not identical. The Eufy Omni S1 Pro is unequivocally the best mopping robot vacuum I've ever tested, so I was excited to test the new Omni E28, which features a very similar system. Thankfully, the Omni E28 didn't disappoint. The large mop roller covers the length of the vacuum's width and leaves no streaks behind during mopping. Streaky floors are one of my biggest pet peeves when testing robot vacuum and mop combinations, and they're a more common occurrence than I'd like. Also: My favorite indoor security camera has no subscription fees and is on sale right nowEufy is also launching an E25 robot vacuum, which features the same HydroJet self-cleaning mop system as the E28. The robot's mop roller is continuously scraped clean as it spins, and it keeps clean and dirty water in separate tanks within its body, so it only mops with clean water. The mop also exerts more downward pressure to ensure deep cleaning than the S1 Pro, with 1.5kg (3.3 lbs) instead of 1kg.  Maria Diaz/ZDNETHowever, continuously spraying the roller with clean water inside the robot keeps it moist. Scraping off the dirt and wringing out the dirty water as the roller spins ensures your floors are clean instead of streaky or filmy. The Eufy Omni E28, like the S1 Pro, is the closest thing to a manual mopping result you can get from a robot vacuum and mop. Also: I love a vacuum and mop to clean dry and wet messes, especially when it's on saleThe E28 and E25 robot vacuums have 20,000Pa of suction power and anti-tangle technology, including a DuoSpiral double roller brush to remove pet hair and avoid entanglements. The robots are self-emptying robot vacuums with a self-washing mop roller. The only difference is the portable spot cleaner, which only the E28 has. The Eufy Omni E28 robot vacuum and mop has dual brush rollers and a roller mop. Maria Diaz/ZDNETThe spot cleaner proved to be very effective. It's heavy, like most spot cleaners when full of water, but it has a retractable handle on top that makes it easy to carry around. You also don't have to press any buttons or move anything to release it; just unplug it, pull the retractable handle, and go. I didn't like that the spot cleaner powers the base station, so if you take it somewhere else in your home to clean, the robot's charging station is left without power until you return it. This is fine for quick cleanups, but it can be annoying when a forgetful house member takes the spot cleaner upstairs and leaves it in a room for two days after they're done (totally not me). Also: This simple Amazon tablet became one of my biggest smart home upgrades yet (and it's on sale)The spot cleaner has a self-cleaning hose attached, but no other attachments. The hose ends in a static brush head that sprays clean water, which you use to clean messes on soft surfaces, like carpets, rugs, and upholstery. Since it isn't motorized, you must manually brush the rug or fabric with the brush head to scrub it clean. Once you're done, you just have to press a button along one end of the brush head to make the spot cleaner cycle clean water through the hose without spilling, cleaning the hose for you.  These pictures were taken three minutes apart. The left (before) shows yogurt stains on an ottoman. I sprayed a liquid spot cleaner and went over it with the brush and water; the results are on the right (after). Maria Diaz/ZDNETThere's no separate detergent tank for the spot cleaner, though you could add some detergent directly into the clean water tank. I recommend using just water in the clean water tank and spraying your preferred carpet or upholstery cleaning solution directly on the stains to pre-treat them. You can then scrub the mess clean with the Eufy E28 brush and rinse out the detergent. ZDNET's buying adviceThe Eufy Omni E28 is designed to solve a big problem for many US customers: the need for regular floor cleanings and the ability to quickly clean up messes on soft surfaces in a single device. This device isn't meant to replace your existing carpet cleaner, but it's perfect for consumers who may need a spot cleaner and are also in the market for one of the best robot vacuum and mops available.Also: Spring cleaning takes me no time with my favorite smart home devicesI'm not a fan of fully carpeted living spaces, but my home has carpeted bedrooms, one of which we use as our TV room. With three young kids who have movie nights and play time in that TV room, its carpet unfortunately sees a lot of spills. I was in the market for a spot cleaner for a while, but decided to buy a full carpet cleaner instead, which I use to clean our carpets at least once every quarter.  The E28 cleaned up the soy sauce stains comparably to the larger carpet cleaner. Maria Diaz/ZDNETBut there are always little messes in between -- whether it's spilled ketchup on the carpet, a muddy shoeprint on the entryway rug, or yogurt on the fabric ottoman. So I appreciate having the Eufy Omni E28's spot cleaner always handy. Instead of dragging out a heavy carpet cleaning machine and filling it with water to clean a 6-inch in diameter spill, I can just unplug and grab the E28, clean the mess, and return it to the dock with little work on my end. It's also priced quite well for a first-of-its-kind device with a flagship-level robot vacuum and mop. The Eufy Omni E28 robot vacuum, mop, and spot cleaning combination is now available on Eufy's website and Amazon for $1,000. The Eufy E25 robot vacuum and mop without the spot cleaner will be available in June for $900. When will this deal expire? While many sales events feature deals for a specific length of time, deals are on a limited-time basis, making them subject to expire at any time. ZDNET remains committed to finding, sharing, and updating the best offers to help you maximize your savings so you can feel as confident in your purchases as we feel in our recommendations. Our ZDNET team of experts constantly monitors the deals we feature to keep our stories up-to-date. If you missed out on this deal, don't worry -- we're always sourcing new savings opportunities at ZDNET.com. Show more Featured

When it comes to Apple, all eyes are on AI. Generative AI (genAI) is the most disruptive technology we’ve seen in years; it is weaving itself into all parts of life – so why should IT management be left unscathed? It won’t be, and the latest AI-powered IT management features within the Jamf platform will soon be the kind of tools IT expects. Jamf is a leading Apple-in-the-enterprise device management (and security vendor recently began offering enterprise support for Android devices). The company has been working away on AI features to support its solutions for some time, and has at last introduced some of these at its Jamf Nation Live event. The tools are designed to boost efficiency and support better decision-making when it comes to handling your fleets. Of course, you’d expect anyone fielding genAI solutions to say something like that, so what do these tools do? Introducing Jamf AI Assistant Available as a beta, AI Assistant is designed to support tech support! That means it will help IT admins find what they need and help them understand how and why devices they do find are configured. Jamf splits these two paths into two categories: Search skill and Explain skill. Search skill lets admins perform natural language inventory queries across their managed fleets, enabling them to quickly find devices within their flotilla that meet the search parameters. The goal is to make it quicker and easier to audit managed devices for compliance, and to troubleshoot when things go wrong. Explain skill caters to another facet of an IT admin’s daily challenges. As Jamf explains, it means the genAI can translate complex configurations and policies into clear, easy-to-understand language. This helps admins make informed decisions, streamline troubleshooting and manage policies more confidently, says Jamf. While these new Jamf tools don’t automate much of the workload facing IT, it’s not hard to see how once the AI can understand what’s happening on a Mac and identify those devices that meet a set of parameters, the only missing piece is to automate some of the workflow in between. This, of course, is the direction of travel and will likely ripple across IT and every platform. Who knows, it might even make the cost of supporting Windows fleets almost as affordable as that of managing fleets of Apple devices. (Though I doubt it.) Beyond AI Jamf also made a handful of announcements outside of AI, including the general availability of Blueprints, a set of tools the company announced at JNUC last year. Blueprints builds on Apple’s Declarative Device Management framework and is designed to simplify and accelerate device configuration by consolidating policies, profiles and restrictions into a single, unified workflow. This makes a lot of sense on a road map to further AI deployment, as well as for anyone attempting to manage and deploy large Apple fleets. I imagine admins preparing for mammoth college- or school-wide deployments will have some optimism that Blueprints could help save time. Don’t neglect that education tech is expected to deploy thousands of devices in a few weeks, so these tools should be significant to them. Jamf continues working on Blueprints, and has introduced a beta release of Configuration Profiles within Blueprints. This tech consists of a new dynamic framework designed to help teams manage devices at scale, thanks to the new dynamic framework for MDM key delivery. Ticket to ride Jamf has offered a Self Service+ portal since earlier this year. Aimed at end-users, the system lets users request, download and update apps, as well as monitor their device security. Those features have been expanded with identity management tools, so users can view their accounts change passwords, and request things like temporary admin access. The beauty of Self Service+ is that it enables users to do these things autonomously while keeping their devices fully auditable and compliant. The idea is that it’s a lot better to focus the expensive tech support teams on the big problems, rather than seeing them bogged down in small, transient (albeit important), challenges.  The company also introduced Compliance Benchmarks. Based on Apple’s macOS Security Compliance Project (mSCP), this system helps IT automate the process of securing their Apple devices. Jamf has also added malware detection to its App Installers module, which means every application made available through that system is scanned to maintain security confidence. That’s really important to companies attempting to provision apps to employees, particularly if they want to avoid accidental installs of hacked malware posing as the original app. You can follow me on social media! Join me on BlueSky,  LinkedIn, and Mastodon.

Eight months after iOS 18 and iPadOS 18 were launched, Apple is now sharing the final installation and usage statistics for its current-generation operating systems for the iPhone and iPad.

Posted on : June 5, 2025 By Tech World Times AI  Rate this post Artificial intelligence tools now touch nearly every corner of modern business, from customer service and marketing to supply chain management and HR. These powerful technologies promise speed, accuracy, and insight, but their missteps can cause more than temporary inconvenience. A single AI-driven error can result in regulatory investigations, civil lawsuits, or public scandals that threaten the foundation of a business. Understanding how legal exposure arises from AI mistakes—and how a skilled attorney protects your interests—is no longer an option, but a requirement for any forward-thinking business owner. What Types of AI Errors Create Legal Liability? AI does not think or reason like a human; it follows code and statistical patterns, sometimes with unintended results. These missteps can create a trail of legal liability for any business owner. For example, an online retailer’s AI recommends discriminatory pricing, sparking allegations of unfair trade practices. An HR department automates hiring decisions with AI, only to face lawsuits for violating anti-discrimination laws. Even an AI-driven chatbot, when programmed without proper safeguards, can inadvertently give health advice or misrepresent product claims—exposing the company to regulatory penalties. Cases like these are regularly reported in Legal news as businesses discover the high cost of digital shortcuts. When Is a Business Owner Liable for AI Mistakes? Liability rarely rests with the software developer or the tool itself. Courts and regulators expect the business to monitor, supervise, and, when needed, override AI decisions. Suppose a financial advisor uses AI to recommend investments, but the algorithm suggests securities that violate state regulations. Even if the AI was “just following instructions,” the advisor remains responsible for client losses. Similarly, a marketing team cannot escape liability if their AI generates misleading advertising. The bottom line: outsourcing work to AI does not outsource legal responsibility. How Do AI Errors Harm Your Reputation and Operations? AI mistakes can leave lasting marks on a business’s reputation, finances, and operations. A logistics firm’s route-optimization tool creates data leaks that breach customer privacy and trigger costly notifications. An online business suffers public backlash after an AI-powered customer service tool sends offensive responses to clients. Such incidents erode public trust, drive customers to competitors, and divert resources into damage control rather than growth. Worse, compliance failures can result in penalties or shutdown orders, putting the entire enterprise at risk. What Steps Reduce Legal Risk From AI Deployments? Careful planning and continuous oversight keep AI tools working for your business—not against it. Compliance is not a “set it and forget it” matter. Proactive risk management transforms artificial intelligence from a liability into a valuable asset. Routine audits, staff training, and transparent policies form the backbone of safe, effective AI use in any organization. You should review these AI risk mitigation strategies below. Implement Manual Review of Sensitive Outputs: Require human approval for high-risk tasks, such as legal filings, financial transactions, or customer communications. A payroll company’s manual audits prevented the accidental overpayment of employees by catching AI-generated errors before disbursement. Update AI Systems for Regulatory Changes: Stay ahead of new laws and standards by regularly reviewing AI algorithms and outputs. An insurance brokerage avoided regulatory fines by updating their risk assessment models as privacy laws evolved. Document Every Incident and Remediation Step: Keep records of AI errors, investigations, and corrections. A healthcare provider’s transparency during a patient data mix-up helped avoid litigation and regulatory penalties. Limit AI Access to Personal and Sensitive Data: Restrict the scope and permissions of AI tools to reduce the chance of data misuse. A SaaS provider used data minimization techniques, lowering the risk of exposure in case of a system breach. Consult With Attorneys for Custom Policies and Protocols: Collaborate with experienced Attorneys to design, review, and update AI compliance frameworks. How Do Attorneys Shield Your Business From AI Legal Risks? Attorneys provide a critical safety net as AI integrates deeper into business operations. They draft tailored contracts, establish protocols for monitoring and escalation, and assess risks unique to your industry. In the event of an AI-driven incident, legal counsel investigates the facts, manages communication with regulators, and builds a robust defense. By providing training, ongoing guidance, and crisis management support, attorneys ensure that innovation doesn’t lead to exposure—or disaster. With the right legal partner, businesses can harness AI’s power while staying firmly on the right side of the law. Tech World TimesTech World Times (TWT), a global collective focusing on the latest tech news and trends in blockchain, Fintech, Development & Testing, AI and Startups. If you are looking for the guest post then contact at techworldtimes@gmail.com

Switch 2 turned up on our doorstep this afternoon and here's what you can look forward to if you plug yours in at just past midnight tonight - including one warningTech21:32, 04 Jun 2025Updated 21:32, 04 Jun 2025Here's what Nintendo sent usAfter months of writing about the Nintendo Switch 2 daily (and getting very excited for Mario Kart World), it was a bit of a strange feeling to have the console dropped off at my doorstep earlier today.While I had preordered, Nintendo sent out the console and some peripherals, so I'm in a position to tell you what you can expect if you're attending a midnight launch, or if you're currently queuing outside your store.‌Looking for a more detailed preview of the hardware? You can find that here, and we've also got hands-on impressions of Mario Kart World and Nintendo Switch Welcome Tour.‌Mario Kart World is Nintendo's big Switch 2 launch title(Image: Nintendo)When powering on your Switch 2, you'll need to connect to the internet to download the all-important firmware update that turns it from a pricey paperweight into a nifty console.The console will also introduce you to some of its features and prompt you to add a MicroSD Express card (doing so will format it so it's ready for use).Article continues belowYou can complete the setup with any version of the Switch 2 controllers, and you'll be prompted to start a system transfer from your original console if you have one.We'd recommend doing so, because it'll transfer your saved data to your new system, but it does come with an inconvenience tied to our biggest Switch 2 bugbear so far: painfully slow download speeds.Logging into the console and updating the firmware took about 20 minutes, but downloads move glacially slow.‌Add to that the console trying to download everything from your Switch 1 at once, and I had to spend a few minutes closing downloads down.Even the more modestly-sized games like Puyo Puyo Tetris were dragging on my gigabit Wi-Fi, although I'd imagine it's down to the 'pipes being clogged' as far as servers go.Still, if you're planning to play anything tonight, you might want to stick to physical media for a bit.Article continues belowWhile the Joy-Con are great, I'm massively impressed by the Pro Controller. We'll have a full live blog running most of the day tomorrow to talk more about Switch 2 on its official launch day, but I'll be leaning towards the more traditional pad for my Zelda playthroughs and more.For now, though, I'm pretty pleased I have a physical copy of Mario Kart World to keep me going until Sony's State of Play tonight. Don't forget to check out our predictions.For the latest breaking news and stories from across the globe from the Daily Star, sign up for our newsletters.‌‌‌

It’s easy to look at President Donald Trump’s second term and conclude that the less power and reach the federal government has, the better. After all, a smaller government might provide Trump or someone like him with fewer opportunities to disrupt people’s lives, leaving America less vulnerable to the whims of an aspiring autocrat. Weaker law-enforcement agencies could lack the capacity to enforce draconian policies. The president would have less say in how universities like Columbia conduct their business if they weren’t so dependent on federal funding. And he would have fewer resources to fundamentally change the American way of life.Trump’s presidency has the potential to reshape an age-old debate between the left and the right: Is it better to have a big government or a small one? The left, which has long advocated for bigger government as a solution to society’s problems, might be inclined to think that in the age of Trump, a strong government may be too risky. Say the United States had a single-payer universal health care system, for example. As my colleague Kelsey Piper pointed out, the government would have a lot of power to decide what sorts of medical treatments should and shouldn’t be covered, and certain forms of care that the right doesn’t support — like abortion or transgender health — would likely get cut when they’re in power. That’s certainly a valid concern. But the dangers Trump poses do not ultimately make the case for a small or weak government because the principal problem with the Trump presidency is not that he or the federal government has too much power. It’s that there’s not enough oversight.Reducing the power of the government wouldn’t necessarily protect us. In fact, “making government smaller” is one of the ways that Trump might be consolidating power.First things first: What is “big government”?When Americans are polled about how they feel about “big government” programs — policies like universal health care, Social Security, welfare for the poor — the majority of people tend to support them. Nearly two-thirds of Americans believe the government should be responsible for ensuring everyone has health coverage. But when you ask Americans whether they support “big government” in the abstract, a solid majority say they view it as a threat.That might sound like a story of contradictions. But it also makes sense because “big government” can have many different meanings. It can be a police state that surveils its citizens, an expansive regulatory state that establishes and enforces rules for the private sector, a social welfare state that directly provides a decent standard of living for everyone, or some combination of the three. In the United States, the debate over “big government” can also include arguments about federalism, or how much power the federal government should have over states. All these distinctions complicate the debate over the size of government: Because while someone might support a robust welfare system, they might simultaneously be opposed to being governed by a surveillance state or having the federal government involved in state and local affairs.As much as Americans like to fantasize about small government, the reality is that the wealthiest economies in the world have all been a product of big government, and the United States is no exception. That form of government includes providing a baseline social safety net, funding basic services, and regulating commerce. It also includes a government that has the capacity to enforce its rules and regulations.A robust state that caters to the needs of its people, that is able to respond quickly in times of crisis, is essential. Take the Covid-19 pandemic. The US government, under both the Trump and Biden administrations, was able to inject trillions of dollars into the economy to avert a sustained economic downturn. As a result, people were able to withstand the economic shocks, and poverty actually declined. Stripping the state of the basic powers it needs to improve the lives of its citizens will only make it less effective and erode people’s faith in it as a central institution, making people less likely to participate in the democratic process, comply with government policies, or even accept election outcomes.A constrained government does not mean a small governmentBut what happens when the people in power have no respect for democracy? The argument for a weaker and smaller government often suggests that a smaller government would be more constrained in the harm it can cause, while big government is more unrestrained. In this case, the argument is that if the US had a smaller government, then Trump could not effectively use the power of the state — by, say, deploying federal law enforcement agencies or withholding federal funds — to deport thousands of immigrants, bully universities, and assault fundamental rights like the freedom of speech. But advocating for bigger government does not mean you believe in handing the state unlimited power to do as it pleases. Ultimately, the most important way to constrain government has less to do with its size and scope and more to do with its checks and balances. In fact, one of the biggest checks on Trump’s power so far has been the structure of the US government, not its size. Trump’s most dangerous examples of overreach — his attempts to conduct mass deportations, eliminate birthright citizenship, and revoke student visas and green cards based on political views — have been an example of how proper oversight has the potential to limit government overreach. To be sure, Trump’s policies have already upended people’s lives, chilled speech, and undermined the principle of due process. But while Trump has pushed through some of his agenda, he hasn’t been able to deliver at the scale he promised. But that’s not because the federal government lacks the capacity to do those things. It’s because we have three equal branches of government, and the judicial branch, for all of its shortcomings in the Trump era, is still doing its most basic job to keep the executive branch in check. Reforms should include more oversight, not shrinking governmentThe biggest lesson from Trump’s first term was that America’s system of checks and balances — rules and regulations, norms, and the separate branches of government — wasn’t strong enough. As it turned out, a lot of potential oversight mechanisms did not have enough teeth to meaningfully restrain the president from abusing his power. Trump incited an assault on the US Capitol in an effort to overturn the 2020 election, and Congress ultimately failed in its duty to convict him for his actions. Twice, impeachment was shown to be a useless tool to keep a president in check.But again that’s a problem of oversight, not of the size and power of government. Still, oversight mechanisms need to be baked into big government programs to insulate them from petty politics or volatile changes from one administration to the next. Take the example of the hypothetical single-payer universal health care system. Laws dictating which treatments should be covered should be designed to ensure that changes to them aren’t dictated by the president alone, but through some degree of consensus that involves regulatory boards, Congress, and the courts. Ultimately, social programs should have mechanisms that allow for change so that laws don’t become outdated, as they do now. And while it’s impossible to guarantee that those changes will always be good, the current system of employer-sponsored health insurance is hardly a stable alternative.By contrast, shrinking government in the way that Republicans often talk about only makes people more vulnerable. Bigger governments — and more bureaucracy — can also insulate public institutions from the whims of an erratic president. For instance, Trump has tried to shutter the Consumer Financial Protection Bureau (CFPB), a regulatory agency that gets in the way of his and his allies’ business. This assault allows Trump to serve his own interests by pleasing his donors.In other words, Trump is currently trying to make government smaller — by shrinking or eliminating agencies that get in his way — to consolidate power. “Despite Donald Trump’s rhetoric about the size or inefficiency of government, what he has done is eradicate agencies that directly served people,” said Julie Margetta Morgan, president of the Century Foundation who served as an associate director at the CFPB. “He may use the language of ‘government inefficiency’ to accomplish his goals, but I think what we’re seeing is that the goals are in fact to open up more lanes for big businesses to run roughshod over the American people.” The problem for small-government advocates is that the alternative to big government is not just small government. It’s also big business because fewer services, rules, and regulations open up the door to privatization and monopolization. And while the government, however big, has to answer to the public, businesses are far less accountable. One example of how business can replace government programs is the Republicans’ effort to overhaul student loan programs in the latest reconciliation bill the House passed, which includes eliminating subsidized loans and limiting the amount of aid students receive. The idea is that if students can’t get enough federal loans to cover the cost of school, they’ll turn to private lenders instead. “It’s not only cutting Pell Grants and the affordability of student loan programs in order to fund tax cuts to the wealthy, but it’s also creating a gap where [private lenders] are all too happy to come in,” Margetta Morgan said. “This is the small government alternative: It’s cutting back on programs that provided direct services for people — that made their lives better and more affordable — and replacing it with companies that will use that gap as an opportunity for extraction and, in some cases, for predatory services.”Even with flawed oversight, a bigger and more powerful government is still preferable because it can address people’s most basic needs, whereas small government and the privatization of public services often lead to worse outcomes.So while small government might sound like a nice alternative when would-be tyrants rise to power, the alternative to big government would only be more corrosive to democracy, consolidating power in the hands of even fewer people (and businesses). And ultimately, there’s one big way for Trump to succeed at destroying democracy, and that’s not by expanding government but by eliminating the parts of government that get in his way.See More: