Discover why Zettlr became my favorite Markdown editor for daily writing, notes, and organization—simple, fast, and open-source.

The Celero 5G Tab is available for as low as $100 as part of a Boost Mobile network-exclusive bundle. Here's my buying advice after a week.

Where others have become obsessed with speed and trends, Sergio Membrillas has built a career on slowing down and staying true to his craft. Over 13 years as a professional illustrator, he's evolved a distinct style – bold, graphic, and quietly playful – that feels both timeless and entirely his own. But this evolution, as he's quick to point out, wasn't something he forced. "I believe evolution is essential for every artist," Sergio reflects. "Change is not something I resist; it's something I enjoy and welcome as part of the creative journey." His work, initially influenced by a love of Mid-Century graphic design, has gradually absorbed references as diverse as Etruscan art, Mesopotamian motifs, and early 20th-century traditional tattoos. It's a portfolio built on curiosity, not conformity. Despite his stylistic clarity, Sergio's process remains refreshingly analogue at its core. He still begins each project with pencil and paper, leaning into the tactility of drawing by hand. "I've always valued having a physical relationship with art," he says. "There's something essential about feeling the wood of the pencil, manually erasing mistakes, rather than simply double-tapping a screen." His philosophy of working slowly, attentively, and with purpose shows in the balanced compositions and confident use of negative space that has become his signature. Sergio credits his background in graphic design for this instinctive sense of structure. "There has always been a strong graphic sensibility within me," he says, noting that the discipline of design continues to inform his illustration practice, particularly in editorial and poster work where clarity and storytelling must co-exist. Yet, like many creative careers, his path into illustration wasn't plotted from the start. Initially, Sergio imagined illustration would complement his design projects, not become the main event. "At first, I thought I would incorporate my illustrations into my graphic design projects – but in the end, it turned out to be the other way around." A commission for EasyJet's in-flight magazine marked a pivotal moment that reframed illustration from a hobby to a profession. "It made me realize that being an illustrator is a real profession, just like any other." Fast-forward to today, and Sergio's client list reads like a who's who of publishing and design, from The New Yorker to Pentagram. While the calibre of collaborators has changed, what matters most remains the same: trust. "When a client trusts your work and approaches projects with an open mind, collaboration flourishes," he says. It's in these open, trusting relationships that Sergio finds the space to experiment and further develop his ideas. Unsurprisingly, editorial work holds a special place for him. "Editorial projects offer wider creative margins, allowing for greater flexibility and innovation," he explains. Compared to the tighter confines of advertising, editorial illustration offers the opportunity to tell nuanced stories, and Sergio is clear that he views every assignment, regardless of format, as a collaborative effort. If one thing is clear, though, it's that he's not that he's afraid to say no when needed. Maintaining a strong personal voice is non-negotiable. "I always strive to stay true to myself and ensure that every project I undertake reflects a clear personal signature," he says. For Sergio, authenticity isn't just a matter of artistic pride; it's what differentiates an illustrator in a saturated, increasingly automated industry. Valencia is home for Sergio, a city he credits with much of his creative energy. "Oh, Valencia! It's a beautiful city that inspires me and brings me joy," he says, describing it as a European cousin to Los Angeles with its sun-soaked streets and vibrant cultural scene. The blend of tradition and modernity fuels his practice, offering constant inspiration without the sensory overload that often accompanies larger creative hubs. Given the pressure many creatives feel to keep pace with shifting trends, Sergio's approach feels almost radical. "I'm not particularly interested in trends," he says. "What truly matters to me is the feeling of having done something meaningful and fulfilling by the end of the day." Instead of chasing what's fashionable, he draws inspiration from a surprisingly eclectic bookshelf, mixing everything from Wim Crouwel's graphic design classics to studies on Scandinavian tattoos and Alec Soth's photography. It's a reminder that fresh ideas rarely come from looking where everyone else is looking. In the era of AI and content overload, the role of the illustrator is changing, but Sergio remains optimistic. While machine learning might churn out images at record speed, it can't replicate the nuance and emotional intelligence that underpin great illustration. "Illustrators can tell stories, evoke emotions, and create meaningful connections that machines simply cannot replicate," he says. "Our role is shifting, but the value of authentic, thoughtful illustration remains indispensable." That insistence on authenticity carries through to the advice he offers younger illustrators navigating a commercial landscape. "Create work that makes you happy when you go to sleep at night," Sergio advises. "It's important to find projects that align with your values and passions so your artistic voice remains authentic." It's an ethos that has carried him through more than a decade of creative highs and industry shifts. Perhaps it's the real secret behind the clarity of his practice, which he has built not on chasing trends or algorithms but on careful craft, deliberate evolution, and the simple, enduring joy of a well-made pencil and a blank piece of paper.

Email authentication protocols like SPF, DKIM, and DMARC play a critical role in protecting domains from spoofing and phishing. However, when SEGs are introduced into the email path, the interaction with these protocols becomes more complex. Security gateways(SEGs) are a core part of many organizations’ email infrastructure. They act as intermediaries between the public internet and internal mail systems, inspecting, filtering, and routing messages. This blog examines how security gateways handle SPF, DKIM, and DMARC, with real-world examples from popular gateways such as Proofpoint, Mimecast, and Avanan. We’ll also cover best practices for maintaining authentication integrity and avoiding misconfigurations that can compromise email authentication or lead to false DMARC failures. Security gateways often sit at the boundary between your organization and the internet, managing both inbound and outbound email traffic. Their role affects how email authentication protocols behave. An inbound SEG examines emails coming into your organization. It checks SPF, DKIM, and DMARC to determine if the message is authentic and safe before passing it to your internal mail servers. An outbound SEG handles emails sent from your domain. It may modify headers, rewrite envelope addresses, or even apply DKIM signing. All of these can impact SPF,  DKIM, or DMARC validation on the recipient’s side. Understanding how SEGs influence these flows is crucial to maintaining proper authentication and avoiding unexpected DMARC failures. Inbound Handling of SPF, DKIM, and DMARC by Common Security Gateways When an email comes into your organization, your security gateway is the first to inspect it. It checks whether the message is real, trustworthy, and properly authenticated. Let’s look at how different SEGs handle these checks. Avanan (by Check Point) SPF: Avanan verifies whether the sending server is authorized to send emails for the domain by checking the SPF record. DKIM: It verifies if the message was signed by the sending domain and if that signature is valid. DMARC: It uses the results of the SPF and DKIM check to evaluate DMARC. However, final enforcement usually depends on how DMARC is handled by Microsoft 365 or Gmail, as Avanan integrates directly with them. Avanan offers two methods of integration:1. API integration: Avanan connects via APIs, no change in MX, usually Monitor or Detect modes.2. Inline integration: Avanan is placed inline in the mail flow (MX records changed), actively blocking or remediating threats. Proofpoint Email Protection SPF: Proofpoint checks SPF to confirm the sender’s IP is authorized to send on behalf of the domain. You can set custom rules (e.g. treat “softfail” as “fail”). DKIM: It verifies DKIM signatures and shows clear pass/fail results in logs. DMARC: It fully evaluates DMARC by combining SPF and DKIM results with alignment checks. Administrators can configure how to handle messages that fail DMARC, such as rejecting, quarantining, or delivering them. Additionally, Proofpoint allows whitelisting specific senders you trust, even if their emails fail authentication checks. Integration Methods Inline Mode: In this traditional deployment, Proofpoint is positioned directly in the email flow by modifying MX records. Emails are routed through Proofpoint’s infrastructure, allowing it to inspect and filter messages before they reach the recipient’s inbox. This mode provides pre-delivery protection and is commonly used in on-premises or hybrid environments. API-Based (Integrated Cloud Email Security – ICES) Mode: Proofpoint offers API-based integration, particularly with cloud email platforms like Microsoft 365 and Google Workspace. In this mode, Proofpoint connects to the email platform via APIs, enabling it to monitor and remediate threats post-delivery without altering the email flow. This approach allows for rapid deployment and seamless integration with existing cloud email services. Mimecast SPF: Mimecast performs SPF checks to verify whether the sending server is authorized by the domain’s SPF record. Administrators can configure actions for SPF failures, including block, quarantine, permit, or tag with a warning. This gives flexibility in balancing security with business needs. DKIM: It validates DKIM signatures by checking that the message was correctly signed by the sending domain and that the content hasn’t been tampered with. If the signature fails, Mimecast can take actions based on your configured policies. DMARC: It fully evaluates DMARC by combining the results of SPF and DKIM with domain alignment checks. You can choose to honor the sending domain’s DMARC policy (none, quarantine, reject) or apply custom rules, for example, quarantining or tagging messages that fail DMARC regardless of the published policy. This allows more granular control for businesses that want to override external domain policies based on specific contexts. Integration Methods Inline Deployment: Mimecast is typically deployed as a cloud-based secure email gateway. Organizations update their domain’s MX records to point to Mimecast, so all inbound (and optionally outbound) emails pass through it first. This allows Mimecast to inspect, filter, and process emails before delivery, providing robust protection. API Integrations: Mimecast also offers API-based services through its Mimecast API platform, primarily for management, archival, continuity, and threat intelligence purposes. However, API-only email protection is not Mimecast’s core model. Instead, the APIs are used to enhance the inline deployment, not replace it. Barracuda Email Security Gateway SPF: Barracuda checks the sender’s IP against the domain’s published SPF record. If the check fails, you can configure the system to block, quarantine, tag, or allow the message, depending on your policy preferences. DKIM: It validates whether the incoming message includes a valid DKIM signature. The outcome is logged and used to inform further policy decisions or DMARC evaluations. DMARC: It combines SPF and DKIM results, checks for domain alignment, and applies the DMARC policy defined by the sender. Administrators can also choose to override the DMARC policy, allowing messages to pass or be treated differently based on organizational needs (e.g., trusted senders or internal exceptions). Integration Methods Inline mode (more common and straightforward): Barracuda Email Security Gateway is commonly deployed inline by updating your domain’s MX records to point to Barracuda’s cloud or on-premises gateway. This ensures that all inbound emails pass through Barracuda first for filtering and SPF, DKIM, and DMARC validation before being delivered to your mail servers. Deployment Behind the Corporate Firewall: Alternatively, Barracuda can be deployed in transparent or bridge mode without modifying MX records. In this setup, the gateway is placed inline at the network level, such as behind a firewall, and intercepts mail traffic transparently. This method is typically used in complex on-premises environments where changing DNS records is not feasible. Cisco Secure Email (formerly IronPort) Cisco Secure Email acts as an inline gateway for inbound email, usually requiring your domain’s MX records to point to the Cisco Email Security Appliance or cloud service. SPF: Cisco Secure Email verifies whether the sending server is authorized in the sender domain’s SPF record. Administrators can set detailed policies on how to handle SPF failures. DKIM: It validates the DKIM signature on incoming emails and logs whether the signature is valid or has failed. DMARC: It evaluates DMARC by combining SPF and DKIM results along with domain alignment checks. Admins can configure specific actions, such as quarantine, reject, or tag, based on different failure scenarios or trusted sender exceptions. Integration methods On-premises Email Security Appliance (ESA): You deploy Cisco’s hardware or virtual appliance inline, updating MX records to route mail through it for filtering. Cisco Cloud Email Security: Cisco offers a cloud-based email security service where MX records are pointed to Cisco’s cloud infrastructure, which filters and processes inbound mail. Cisco Secure Email also offers advanced, rule-based filtering capabilities and integrates with Cisco’s broader threat protection ecosystem, enabling comprehensive inbound email security. Outbound Handling of SPF, DKIM, and DMARC by Common Security Gateways When your organization sends emails, security gateways can play an active role in processing and authenticating those messages. Depending on the configuration, a gateway might rewrite headers, re-sign messages, or route them through different IPs – all actions that can help or hurt the authentication process. Let’s look at how major SEGs handle outbound email flow. Avanan – Outbound Handling and Integration Methods Outbound Logic Avanan analyzes outbound emails primarily to detect data loss, malware, and policy violations. In API-based integration, emails are sent directly by the original mail server (e.g., Microsoft 365 or Google Workspace), so SPF and DKIM signatures remain intact. Avanan does not alter the message or reroute traffic, which helps maintain full DMARC alignment and domain reputation. Integration Methods 1. API Integration: Connects to Microsoft 365 or Google Workspace via API. No MX changes are needed. Emails are scanned after they are sent, with no modification to SPF, DKIM, or the delivery path.  How it works: Microsoft Graph API or Google Workspace APIs are used to monitor and intervene in outbound emails. Protection level: Despite no MX changes, it can offer inline-like protection, meaning it can block, quarantine, or encrypt emails before they are delivered externally. SPF/DKIM/DMARC impact: Preserves original headers and signatures since mail is sent directly from Microsoft/Google servers. 2. Inline Integration: Requires changing MX records to route email through Avanan. In this mode, Avanan can intercept and inspect outbound emails before delivery. Depending on the configuration, this may affect SPF or DKIM if not properly handled. How it works: Requires adding Avanan’s Protection level: Traditional inline security with full visibility and control, including encryption, DLP, policy enforcement, and advanced threat protection. SPF/DKIM/DMARC impact: SPF configuration is needed by adding Avanan’s include mechanism to the sending domain’s SPF record. The DKIM record of the original sending source is preserved. For configurations, you can refer to the steps in this blog. Proofpoint – Outbound Handling and Integration Methods Outbound Logic Proofpoint analyzes outbound emails to detect and prevent data loss (DLP), to identify advanced threats (malware, phishing, BEC) originating from compromised internal accounts, and to ensure compliance. Their API integration provides crucial visibility and powerful remediation capabilities, while their traditional gateway (MX record) deployment delivers true inline, pre-delivery blocking for outbound traffic. Integration methods 1. API Integration: No MX record changes are required for this deployment method. Integration is done with Microsoft 365 or Google Workspace. How it works: Through its API integration, Proofpoint gains deep visibility into outbound emails and provides layered security and response features, including: Detect and alert: Identifies sensitive content (Data Loss Prevention violations), malicious attachments, or suspicious links in outbound emails. Post-delivery remediation (TRAP): A key capability of the API model is Threat Response Auto-Pull (TRAP), which enables Proofpoint to automatically recall, quarantine, or delete emails after delivery. This is particularly useful for internally sent messages or those forwarded to other users. Enhanced visibility: Aggregates message metadata and logs into Proofpoint’s threat intelligence platform, giving security teams a centralized view of outbound risks and user behavior. Protection level: API-based integration provides strong post-delivery detection and response, as well as visibility into DLP incidents and suspicious behavior.  SPF/DKIM/DMARC impact: Proofpoint does not alter SPF, DKIM, or DMARC because emails are sent directly through Microsoft or Google servers. Since Proofpoint’s servers are not involved in the actual sending process, the original authentication headers remain intact. 2. Gateway Integration (MX Record/Smart Host): This method requires updating MX records or routing outbound mail through Proofpoint via a smart host. How it works: Proofpoint acts as an inline gateway, inspecting emails before delivery. Inbound mail is filtered via MX changes; outbound mail is relayed through Proofpoint’s servers. Threat and DLP filtering: Scans outbound messages for sensitive content, malware, and policy violations. Real-time enforcement: Blocks, encrypts, or quarantines emails before they’re delivered. Policy controls: Applies rules based on content, recipient, or behavior. Protection level: Provides strong, real-time protection for outbound traffic with pre-delivery enforcement, DLP, and encryption. SPF/DKIM/DMARC impact: Proofpoint becomes the sending server: SPF: You need to configure ProofPoint’s SPF. DKIM: Can sign messages; requires DKIM setup. DMARC: DMARC passes if SPF and DKIM are set up properly. Please refer to this article to configure SPF and DKIM for ProofPoint. Mimecast – Outbound Handling and Integration Methods Outbound Logic Mimecast inspects outbound emails to prevent data loss (DLP), detect internal threats such as malware and impersonation, and ensure regulatory compliance. It primarily functions as a Secure Email Gateway (SEG), meaning it sits directly in the outbound email flow. While Mimecast offers APIs, its core outbound protection is built around this inline gateway model. Integration Methods 1. Gateway Integration (MX Record change required) This is Mimecast’s primary method for outbound email protection. Organizations route their outbound traffic through Mimecast by configuring their email server (e.g., Microsoft 365, Google Workspace, etc.) to use Mimecast as a smart host. This enables Mimecast to inspect and enforce policies on all outgoing emails in real time. How it works: Updating outbound routing in your email system (smart host settings), or Using Mimecast SMTP relay to direct messages through their infrastructure. Mimecast then scans, filters, and applies policies before the email reaches the final recipient. Protection level: Advanced DLP: Identifies and prevents sensitive data leaks. Impersonation and Threat Protection: Blocks malware, phishing, and abuse from compromised internal accounts. Email Encryption and Secure Messaging: Applies encryption policies or routes messages via secure portals. Regulatory Compliance: Enforces outbound compliance rules based on content, recipient, or metadata. SPF/DKIM/DMARC impact: SPF: Your SPF record must include Mimecast’s SPF mechanism based on your region to avoid SPF failures. DKIM: A new DKIM record should be configured to make sure your emails are DKIM signed when routing through Mimecast. DMARC: With correct SPF and DKIM setup, Mimecast ensures DMARC alignment, maintaining your domain’s sending reputation. Please refer to the steps in this detailed article to set up SPF and DKIM for Mimecast. 2. API Integration (Complementary to Gateway) Mimecast’s APIs complement the main gateway by providing automation, reporting, and management tools rather than handling live outbound mail flow. They allow you to manage policies, export logs, search archived emails, and sync users. APIs enhance visibility and operational tasks but do not provide real-time filtering or blocking of outbound messages. Since APIs don’t process live mail, they have no direct effect on SPF, DKIM, or DMARC; those depend on your gateway (smart host) setup. Barracuda – Outbound Handling and Integration Methods Outbound Logic Barracuda analyzes outbound emails to prevent data loss (DLP), block malware, stop phishing/impersonation attempts from compromised internal accounts, and ensure compliance. Barracuda offers flexible deployment options, including both traditional gateway (MX record) and API-based integrations. While both contribute to outbound security, their roles are distinct. Integration Methods 1. Gateway Integration (MX Record / Smart Host) — Primary Inline Security How it works: All outbound emails pass through Barracuda’s security stack for real-time inspection, threat blocking, and policy enforcement before delivery. Protection level: Comprehensive DLP (blocking, encrypting, or quarantining sensitive content)  Outbound spam and virus filtering  Enforcement of compliance and content policies This approach offers a high level of control and immediate threat mitigation on outbound mail flow. SPF/DKIM/DMARC impact: SPF: Update SPF records to include Barracuda’s sending IPs or SPF include mechanism. DKIM: Currently, no explicit setup is needed; DKIM of the main sending source is preserved. Refer to this article for more comprehensive guidance on Barracuda SEG configuration. 2. API Integration (Complementary & Advanced Threat Focus) How it works: The API accesses cloud email environments to analyze historical and real-time data, learning normal communication patterns to detect anomalies in outbound emails. It also supports post-delivery remediation, enabling the removal of malicious emails from internal mailboxes after sending. Protection level: Advanced AI-driven detection and near real-time blocking of outbound threats, plus strong post-delivery cleanup capabilities. SPF/DKIM/DMARC impact: Since mail is sent directly by the original mail server (e.g., Microsoft 365), SPF and DKIM signatures remain intact, preserving DMARC alignment and domain reputation. Cisco Secure Email (formerly IronPort) – Outbound Handling and Integration Methods Outbound Logic Cisco Secure Email protects outbound email by preventing data loss (DLP), blocking spam and malware from internal accounts, stopping business email compromise (BEC) and impersonation attacks, and ensuring compliance. Cisco provides both traditional gateway appliances/cloud gateways and modern API-based solutions for layered outbound security. Integration Methods 1. Gateway Integration (MX Record / Smart Host) – Cisco Secure Email Gateway (ESA) How it works: Organizations update MX records to route mail through the Cisco Secure Email Gateway or configure their mail server (e.g., Microsoft 365, Exchange) to smart host outbound email via the gateway. All outbound mail is inspected and policies enforced before delivery. Protection level: Granular DLP (blocking, encrypting, quarantining sensitive content) Outbound spam and malware filtering to protect IP reputation Email encryption for sensitive outbound messages Comprehensive content and attachment policy enforcement SPF: Check this article for comprehensive guidance on Cisco SPF settings. DKIM: Refer to this article for detailed guidance on Cisco DKIM settings. 2. API Integration – Cisco Secure Email Threat Defense How it works: Integrates directly via API with Microsoft 365 (and potentially Google Workspace), continuously monitoring email metadata, content, and user behavior across inbound, outbound, and internal messages. Leverages Cisco’s threat intelligence and AI to detect anomalous outbound activity linked to BEC, account takeover, and phishing. Post-Delivery Remediation: Automates the removal or quarantine of malicious or policy-violating emails from mailboxes even after sending. Protection level: Advanced, AI-driven detection of sophisticated outbound threats with real-time monitoring and automated remediation. Complements gateway filtering by adding cloud-native visibility and swift post-send action. SPF/DKIM/DMARC impact: Since emails are sent directly by the original mail server, SPF and DKIM signatures remain intact, preserving DMARC alignment and domain reputation. If you have any questions or need assistance, feel free to reach out to EasyDMARC technical support.

John Edwards, Technology Journalist & AuthorJune 5, 20254 Min ReadSailGP Australia, USA, and Great Britain racing on San Francisco Bay, CaliforniaDannaphotos via Alamy StockWarren Jones is CTO at SailGP, the organizer of what he describes as the world's most exciting race on water. The event features high-tech F50 boats that speed across the waves at 100 kilometers-per-hour (62 miles-per-hour).  Working in cooperation with Oracle, Jones focuses on innovative solutions for remote broadcast production, data management and distribution, and a newly introduced fan engagement platform. He also leads the team that has won an IBC Innovation Awards for its ambitious and ground-breaking remote production strategy. Among the races Jones organizes is the Rolex SailGP Championship, a global competition featuring national teams battling each other in identical high-tech, high-speed 50-foot foiling catamarans at celebrated venues around the world. The event attracts the sport's top athletes, with national pride, personal glory, and bonus prize money of $12.8 million at stake. Jones also supports event and office infrastructures in London and New York, and at each of the global grand prix events over the course of the season. Prior to joining SailGP, he was IT leader at the America's Cup Event Authority and Oracle Racing. In an online interview, Jones discusses the challenges he faces in bringing reliable data services to event vessels, as well as onshore officials and fans. Related:Warren JonesWhat's the biggest challenge you've faced during your tenure? One of the biggest challenges I faced was ensuring real-time data transmission from our high-performance F50 foiling catamarans to teams, broadcasters, and fans worldwide. SailGP relies heavily on technology to deliver high-speed racing insights, but ensuring seamless connectivity across different venues with variable conditions was a significant hurdle. What caused the problem? The challenge arose due to a combination of factors. The high speeds and dynamic nature of the boats made data capture and transmission difficult. Varying network infrastructure at different race locations created connectivity issues. The need to process and visualize massive amounts of data in real time placed immense pressure on our systems. How did you resolve the problem? We tackled the issue by working with T-Mobile and Ericsson in a robust and adaptive telemetry system capable of transmitting data with minimal latency over 5G. Deploying custom-built race management software that could process and distribute data efficiently [was also important]. Working closely with our global partner Oracle, we optimized Cloud Compute with the Oracle Cloud.  Related:What would have happened if the problem wasn't quickly resolved? Spectator experience would have suffered. Teams rely on real-time analytics for performance optimization, and broadcasters need accurate telemetry for storytelling. A failure here could have resulted in delays, miscommunication, and a diminished fan experience. How long did it take to resolve the problem? It was an ongoing challenge that required continuous innovation. The initial solution took several months to implement, but we’ve refined and improved it over multiple seasons as technology advances and new challenges emerge. Who supported you during this challenge? This was a team effort -- with our partners Oracle, T-Mobile, and Ericsson with our in-house engineers, data scientists, and IT specialists all working closely. The support from SailGP's leadership was also crucial in securing the necessary resources. Did anyone let you down? Rather than seeing it as being let down, I'd say there were unexpected challenges with some technology providers who underestimated the complexity of what we needed. However, we adapted by seeking alternative solutions and working collaboratively to overcome the hurdles. What advice do you have for other leaders who may face a similar challenge? Related:Embrace adaptability. No matter how well you plan, unforeseen challenges will arise, so build flexible solutions. Leverage partnerships. Collaborate with the best in the industry to ensure you have the expertise needed. Stay ahead of technology trends. The landscape is constantly evolving; being proactive rather than reactive is key. Prioritize resilience. Build redundancy into critical systems to ensure continuity even in the face of disruptions. Is there anything else you would like to add? SailGP is as much a technology company as it is a sports league. The intersection of innovation and competition drives us forward and solving challenges like these is what makes this role both demanding and incredibly rewarding. About the AuthorJohn EdwardsTechnology Journalist & AuthorJohn Edwards is a veteran business technology journalist. His work has appeared in The New York Times, The Washington Post, and numerous business and technology publications, including Computerworld, CFO Magazine, IBM Data Management Magazine, RFID Journal, and Electronic Design. He has also written columns for The Economist's Business Intelligence Unit and PricewaterhouseCoopers' Communications Direct. John has authored several books on business technology topics. His work began appearing online as early as 1983. Throughout the 1980s and 90s, he wrote daily news and feature articles for both the CompuServe and Prodigy online services. His "Behind the Screens" commentaries made him the world's first known professional blogger.See more from John EdwardsWebinarsMore WebinarsReportsMore ReportsNever Miss a Beat: Get a snapshot of the issues affecting the IT industry straight to your inbox.SIGN-UPYou May Also Like

A significant cyber breach at His Majesty’s Revenue and Customs (HMRC) that saw scammers cheat the public purse out of approximately £47m has been met with dismay from security experts thanks to the sheer simplicity of the attack, which originated via account takeover attempts on legitimate taxpayers. HMRC disclosed the breach to a Treasury Select Committee this week, revealing that hackers accessed the online accounts of about 100,000 people via phishing attacks and managed to claim a significant amount of money in tax rebates before being stopped. It is understood that those individuals affected have been contacted by HMRC – they have not personally lost any money and are not themselves in any trouble. Arrests in the case have already been made. During proceedings, HMRC also came in for criticism by the committee’s chair Meg Hillier, who had learned about the via an earlier news report on the matter, over the length of time taken to come clean over the incident. With phishing emails sent to unwitting taxpayers identified as the initial attack vector for the scammers, HMRC might feel relieved that it has dodged full blame for the incident. But according to Will Richmond-Coggan, a partner specialising in data and cyber disputes at law firm Freeths, even though the tax office had gone to pains to stress its own systems were never actually compromised, the incident underscored just how widespread the consequences of cyber attacks can be – snowballing from simple origins into a multimillion pound loss. “It is clear from HMRC's explanation that the crime against HMRC was only possible because of earlier data breaches and cyber attacks,” said Richmond-Coggan. “Those earlier attacks put personal data in the hands of the criminals which enabled them to impersonate tax payers and apply successfully to claim back tax.” Meanwhile, Gerasim Hovhannisyan, CEO of EasyDMARC, an email security provider, pointed out that phishing against both private individuals and businesses and other organisations had long ago moved beyond the domain of scammers chancing their luck. While this type of scattergun fraud remains a potent threat, particularly to consumers who may not be informed about cyber security matters – the scale of the HMRC phish surely suggests a targeted operation, likely using carefully crafted email purporting to represent HMRC itself, designed to lure self-assessment taxpayers into handing over their accounts. Not only that, but generative artificial intelligence (GenAI) means targeted phishing operations have become exponentially more dangerous in a very short space of time, added Hovhannisyan. “[It] has made [phishing] scalable, polished, and dangerously convincing, often indistinguishable from legitimate communication. And while many organisations have strengthened their security perimeters, email remains the most consistently exploited and underestimated attack vector,” he said. “These scams exploit human trust, using urgency, authority, and increasingly realistic impersonation tactics. If HMRC can be phished, anyone can.” Added Hovhannisyan: “What’s more alarming is that the Treasury Select Committee only learned of the breach through the news. When £47m is stolen through impersonation, institutions can’t afford to stay quiet. Delayed disclosure erodes trust, stalls response, and gives attackers room to manoeuvre.” Once again a service’s end-users have turned out to be the source of a cyber attack and as such, whether they are internal or – as in this case – external, are often considered an organisation’s first line of defence. However, it is not always wise to take this approach, and for an organisation like HMRC daily engaging with members of the public, it is also not really possible. Security education is a difficult proposition at the best of times and although the UK’s National Cyber Security Centre (NCSC) provides extensive advice and guidance on spotting and dealing with phishing emails for consumers – it also operates a phishing reporting service that as of April 2025 has received over 41 million scam reports – bodies like HMRC cannot rely on everybody having visited the NCSC’s website. As such, Mike Britton, chief information officer (CIO) at Abnormal AI, a specialist in phishing, social engineering and account takeover prevention, argued that HMRC could and should have done more from a technical perspective. “Governments will always be a high tier target for cyber criminals due to the valuable information they hold. In fact, attacks against this sector are rising,” he said. “In this case, it looks like criminals utilised account take over to conduct fraud. To combat this, multifactor authentication (MFA) is key, but as attacks grow more sophisticated, further steps must be taken.” Britton said organisations like HMRC really needed to consider adopting more layered security strategies, not only including MFA but also incorporating wider visibility and unified controls across its IT systems. Account takeover attacks such as the ones seen in this incident can unfold quickly, he added, so its cyber function should also be equipped with the tools to identify and remediate compromised accounts on the fly. Read more about trends in phishing Quishing, meaning QR code phishing, is an offputting term for an on-the-rise attack method. Learn how to defend against it. A healthy dose of judicious skepticism is crucial to preventing phishing attacks, said David Fine, supervisory special agent at the FBI, during a presentation at a HIMSS event. Exchange admins got a boost from Microsoft when it improved how it handles DMARC authentication failures to help organisations fight back from email-based attacks on their users.

With reclaimed land previously allocated to cars, the Grijalva River boardwalk offers generous public spaces and reconnects the Mexican city of Villahermosa to its river In Villahermosa, nature reigns supreme. Surrounded by rivers, lagoons, wild vegetation and the scorching heat of a humid tropical climate, the city’s identity is shaped by intense and unpredictable natural forces. The capital of the Mexican state of Tabasco was founded in 1564 on the banks of the Grijalva River, a vital trade route that has significantly shaped the city’s development. For locals, the river has long been both blessing and threat; major floods have been recorded since the 17th century. A devastating flood in 2007 submerged what officials estimated to be 80 per cent of the city, damaging or destroying more than 120,000 homes. In the aftermath of the inundation, high concrete retaining walls were built along both banks of the Grijalva River to prevent further flooding. While this was an understandable measure at first glance, it consequently caused residents to lose both their visual and physical connection with the river. As a result, people moved, particularly from the western bank where the historical centre is located, to new areas further away from the Grijalva River. The riverfront was left to deteriorate into a troubled zone. On the eastern bank, the neighbourhood of Gaviotas was already considered unsafe before the flood, yet it maintained more of its residential character. In 2022, 15 years after the dramatic flood, then‑president Andrés Manuel López Obrador, more commonly known as AMLO, announced the construction of a new 6km‑long riverfront promenade in Villahermosa, the capital of his home state. The idea was to enable the population to once again take pride in and live with their river, looking to Paris and Rome as examples. The monumental task, with its large urban scale and the population’s psychological trauma, was entrusted to the Ministry of Agricultural, Territorial and Urban Development (SEDATU) as part of their Programa de Mejoramiento Urbano (Urban Improvement Programme, or PMU). This programme aimed to use architecture as an ‘instrument of social transformation’. High expectations were placed on these projects; architects were asked to create ‘places of national pride’ while improving everyday living conditions. The architectural trio of Alejandro Castro Jiménez Labora, Mauricio Rocha Iturbide, and Óscar Rodríguez Castañeda, along with their teams, were commissioned to design a linear park along both banks of the Grijalva. Each architect contributed their strength: Castro brought his expertise in poetic urban furniture; Rocha his sensitive and atmospheric architectural approach; and Rodríguez his thoughtful urban and traffic planning skills. The SEDATU team provided technical and participatory expertise, enabling contextual sensitivity by sharing essential information about the site’s topography, soil conditions and water flows. From the city’s existing observatory, the Torre del Caballero landmark, visitors enjoy an excellent view over the redesigned riverbanks. The historical centre and the Gaviotas neighbourhood now form a single ensemble, while the intervention carefully responds to the different conditions found along the length of the river. The project’s main objective is to reclaim some of the land previously allocated to cars and create a promenade for pedestrians and slower vehicles, punctuated with public spaces and facilities. On both sides of the river, cars are now limited to just one or two grey asphalt lanes. Running alongside are generous cycle paths and pedestrian walkways made of earth‑coloured concrete. Speed bumps in the same material and colour connect the pavements on either side of the road while helping to limit traffic speed to 30km/h, further enhancing pedestrian safety. Several design elements are found along almost the entire promenade. A ribbon of light‑grey benches delineates the edge of the elevated riverfront; stone walls, steps and ramps are used to negotiate the slight changes in level; planters and lush vegetation soften the transition to the walkways, creating a welcome buffer from street traffic. The most visually striking components are the tall, red‑pigmented concrete light poles on the elevated path, adorned with elegant L‑shaped steel light fixtures, which establish a strong and cohesive visual rhythm. Only upon closer inspection you notice the 2007 retaining walls peeking through the dense tropical vegetation. Removing these unattractive concrete barriers was never an option; they stand as a symbol of successful flood protection for the local population. The architectural team ingeniously built the elevated promenade atop the existing wall – an effective concealment from the street side while simultaneously inviting residents to reconnect with the Grijalva.  At the foot of the observatory, directly below the retaining wall, the earth‑toned concrete platforms of the Carlos A Madrazo Becerra Park stretch towards the river. Visitors can access the park via a ramp from the promenade on the western bank or by ferry from the opposite side. In the park, concrete furnishings invite visitors to linger among tropical vegetation set against tall natural stone walls. Importantly, it is a space that is durable and requires minimal maintenance – a survival formula for public parks in the Mexican context. Small traces on the concrete benches reveal that the park weathered its baptism of fire last year: the design accommodates the river’s natural dynamics, adapting to fluctuating water levels without compromising public safety. Beyond providing much‑needed shade, the extensive planting of native, low‑maintenance plants on both riverbanks has improved soil stability. Above the park, on a broad extension of the elevated pathway, stand three long, elegant buildings with large cantilevered roofs supported by hefty beams resting on distinctive double columns. The tall glass walls that enclose the interiors are set back, creating a visual flow between interior and exterior spaces. While the beams evoke timber construction, they – like the columns – are made of the same pigmented concrete used for the promenade paving. Despite their refined composition, these structures have remained largely unused since their completion over a year ago, neither serving their intended function as restaurants nor hosting alternative uses. Even the beautifully designed park sees only limited public engagement. The ambitious goal of SEDATU with the PMU projects to ‘counteract violence and strengthen the social fabric’ appears, for now, to have fallen short in this area. According to national statistics, Villahermosa ranks first in perceived insecurity among Mexican cities. This sense of insecurity is tangible on the promenade by the city centre, where buildings that look abandoned contribute to an atmosphere of neglect. The situation is markedly different on the opposite riverbank, in the Gaviotas neighbourhood. Construction of the 3.5km promenade on this side began in 2021 with three open pavilions housing several small kiosks, which quickly evolved into popular taco stands. The Plaza Solidaridad, revitalised by the architectural trio, draws people from the surrounding vibrant neighbourhood. Further south, the final section that was built is a large sports area and children’s playground, which were embraced by the local community even before their official inauguration in February 2024. Especially after sunset, when the air cools, the well‑lit Gaviotas riverfront comes to life. During daylight hours, however, air‑conditioned shopping centres remain the preferred gathering places for the residents of Villahermosa. Rocha describes the city’s new promenade as a ‘jazz composition’, a striking metaphor that speaks of rhythmic complexity and the freedom to improvise. With just a few designed elements and carefully selected colours, the architects have harmoniously layered the river’s urban spaces. The project is earning international recognition but, in Mexico, it faced sharp criticism and was overshadowed by accusations of nepotism. Castro is a friend of AMLO’s son, and the fact that the intervention took place in the home state of the then‑president, coupled with its substantial budget by local standards, drew considerable attention. According to residents, this undermined public acceptance. When asked about the negative press, Rocha speaks of the need to develop a ‘crisis muscle’; he says architects working on public projects in Mexico must ‘let go of perfectionism’ as much lies beyond their control.  During AMLO’s six‑year term, which ended in 2024, SEDATU implemented 1,300 PMU projects in 193 highly marginalised municipalities across the country. While many of these interventions undoubtedly improved people’s quality of life, the Villahermosa riverside project also reveals architecture’s limitations, exposing some of the programme’s weaknesses: architectural interventions often act as sticking plasters on an extensively damaged urban fabric. They are handed over from a national ministry with comprehensive expertise and funding to local governments lacking the means to sustain them. Although SEDATU conducted participatory consultations during the project’s implementation, this engagement was absent once the project was completed. Public acceptance and appropriation can take time; what this project does is send an invitation out. 2025-06-05 Reuben J Brown Share AR June 2025RoadsBuy Now

House in Palm Springs | © Sydney Turturro via Unsplash Moving from an apartment to a house is a major life milestone. It usually means more space, more responsibility, and more freedom. But unless you plan it right, it can also come with more stress.  Whether upgrading to accommodate a growing family or simply looking for more room to breathe, here are five essential steps to help you move from an apartment to a house confidently and easily. 1. Start with a Clear Plan and Timeline One of the most common mistakes people make when moving from an apartment to a house is underestimating how long it takes. It’s not just about packing up your belongings; it’s about handling logistics, paperwork, and scheduling around daily life.  As soon as you know your moving date, create a moving checklist.  Outline what needs to be done weekly: notifying your landlord, scheduling the elevator if you’re in a high-rise, collecting packing materials, and booking your moving company. Planning ahead helps you avoid last-minute stress and unexpected costs. If possible, give yourself at least 6–8 weeks. That gives you enough time to declutter, coordinate with service providers, and ensure you’re fully prepared for move-in day. The earlier you start, the smoother everything flows. Hiring professional movers early in the process can also secure your preferred date and provide access to helpful services, such as packing, storage, or specialized transportation. With everything scheduled well in advance, you’ll have the peace of mind needed to focus on your new adventure. 2. Downsize Before You Upsize It may sound counterintuitive, but moving to a bigger space doesn’t mean you should bring everything with you.  Over time, we accumulate furniture, clothes, gadgets, and kitchen tools that serve little purpose. And in a small apartment, many of these items might have been crammed into closets or storage bins and forgotten altogether.  Now’s the perfect time to declutter and lighten the load before the move. Start by walking through your apartment and taking stock of everything. Ask yourself what truly adds value to your life and what’s just taking up space. If you haven’t used something in over a year, it’s probably safe to let it go. You can donate, sell, or recycle items as needed. A good rule of thumb is to be ruthless. A cleaner move means a cleaner start in your new home. By purging the excess, you’ll reduce moving costs and arrive at your new house with a fresh mindset. There’s no sense in transporting items you no longer want or need. Instead, you’ll be able to unpack more quickly and enjoy your new space without clutter. 3. Prepare for a Different Kind of Space Living in a house is very different from apartment life. The layout, square footage, and storage options all change, which means your furniture and lifestyle habits may also need to adapt. That cozy loveseat that fits perfectly in your apartment living room might look dwarfed in a larger house.  Before moving, visit the house if possible and take room measurements.  Consider creating a rough floor plan to determine where each piece of furniture will fit. This not only helps your local movers place items on move-in day, but it also ensures you don’t waste time and energy relocating things that won’t work in the new space. Apps and online tools can help you visualize your layout ahead of time. Beyond furniture, also think about what your new home may need.  Will you have a backyard that needs maintenance? A garage that requires storage shelving? An extra guest room or home office that needs furnishing?  While you don’t have to buy everything at once, it’s smart to budget for future purchases so you can comfortably and intentionally grow into your home. 4. Handle Utilities, Address Changes, and Logistics © Peter Thomas via Unsplash © Mitch via Unsplash Unlike apartments, where utilities may be partially covered or managed by the landlord, houses typically require you to set up and manage everything yourself.  This includes electricity, water, gas, internet, trash collection, and sometimes even lawn care services. Don’t wait until the last minute; contact providers at least a week before your move to schedule installation or transfers. At the same time, update your address with your bank, subscription services, and relevant government agencies. This helps ensure you continue to receive important mail and prevents service disruptions. If you’re moving within the same city, this can be fairly straightforward. If you’re moving to a different region or province, however, make sure you check for local utility providers and regional services. Elevator bookings and parking permits are other key details to address, especially when moving out of an apartment in a busy area.  Confirm all building rules and moving hours in advance, and inform your movers so they can plan accordingly. Clear communication on these details makes the moving day smoother for everyone involved. 5. Rely on a Trusted Moving Partner Perhaps the most important step in this process is choosing the right moving company.  Apartment-to-house moves require experience, careful coordination, and physical effort, especially when dealing with tight stairwells, narrow hallways, or long distances from the apartment to the truck.  A professional moving team can handle the logistics efficiently while protecting your belongings from damage. Instead of doing it all yourself, you can count on us to carry the load literally. We bring the right equipment, vehicles, and muscle, so you don’t have to worry about heavy lifting or unexpected delays. More importantly, we offer peace of mind during an exciting and overwhelming time. A good moving experience sets the tone for your new chapter. Let us help make that transition smooth, stress-free, and even enjoyable. Final Word Moving from an apartment to a house is more than just a physical shift; it’s a lifestyle change. With the right planning, thoughtful decisions, and support from experienced movers, you can make the process simple and even fun. Whether it’s your first home or your dream upgrade, we’re here to guide you every step of the way. Frequently Asked Questions  1. How far in advance should I book a moving company when moving from an apartment to a house? We recommend booking your moving company at least 4–6 weeks in advance, especially during peak moving seasons (spring and summer). This gives you the best chance to secure your preferred date and time while also allowing time for proper planning, packing, and coordination with building management if needed. 2. What’s the best way to downsize before moving into a house? Even though you’re moving to a larger space, it’s wise to declutter before your move. Sort items by category, keep, donate, sell, or discard, and be honest about what you actually use. Unused furniture, duplicate kitchenware, and old clothes often don’t need to make the move. A lighter load means a faster, more affordable, and more organized transition. 3. Will all my apartment furniture fit properly in a house?  Some furniture from a compact apartment may not always feel too small or awkward in a larger home. We recommend measuring key pieces and comparing them with the dimensions of the new space before moving. Our team can help you decide what’s worth moving and even assist with layout planning to ensure everything fits where it should. 4. What should I do about utilities when moving into a house?  Unlike apartment living, homeowners are responsible for setting up all their utilities individually. Be sure to contact providers for electricity, water, internet, gas, and waste collection at least a week before your move. Scheduling ahead ensures your new home is move-in ready, and you won’t experience any service interruptions. 5. Do I need professional movers for a short move from an apartment to a house? Even if you’re moving just a few blocks, a professional moving team makes the process faster, safer, and far less stressful. We handle the heavy lifting, stairs, tight corners, and transportation logistics, so you don’t have to. Our experience ensures that your belongings arrive safely, regardless of the distance. GuidesTips by ArchEyes Team Leave a comment

June 5, 20253 min readNew Hires Will Still Leave the NWS Dangerously Understaffed, Meteorologists SayNearly 600 employees left the National Weather Service or were fired in recent months. Meteorologists say 125 expected new hires will still leave the agency dangerously understaffedBy Chelsea Harvey & E&E News A tornado struck communities in Somerset and London, Ky., on May 16, 2025, leaving 19 dead and more injured. Michael Swensen/Getty ImagesCLIMATEWIRE | New hiring efforts at the National Weather Service won’t be enough to overcome staffing shortages and potential risks to human lives this summer, meteorologists warned Wednesday at a panel hosted by Democratic Washington Sen. Maria Cantwell.NOAA will hire around 125 new employees at the NWS, the agency said in an announcement first reported Monday by CNN. But nearly 600 employees have departed the NWS over the last few months, after the Trump administration fired probationary federal employees and offered buyouts and early retirements.That means the new hires will account for less than 25 percent of the total losses.On supporting science journalismIf you're enjoying this article, consider supporting our award-winning journalism by subscribing. By purchasing a subscription you are helping to ensure the future of impactful stories about the discoveries and ideas shaping our world today.“A quarter of the staff are not going to do the job when, let’s just say, both hurricane and fire risks are increasing,” Cantwell said during Wednesday’s panel. “[The Trump administration’s] approach in response to this has been a flimsy Band-Aid over a very massive cut.”Cantwell added that the National Hurricane Center is not fully staffed, as NOAA officials suggested last month when announcing their predictions for the upcoming Atlantic hurricane season outlook. The NHC has at least five vacancies, she said, representing meteorologists and technicians who help build forecasts for tropical cyclones in both the Atlantic and Pacific oceans.Meanwhile, NOAA is predicting above-average activity in the Atlantic this hurricane season. Updated fire maps also suggest that nearly all of Cantwell’s home state of Washington, along with Oregon and large swaths of California, will experience an above-average risk of wildfires by August.Kim Doster, NOAA’s director of communications, did not immediately respond to a request for comment on NOAA’s staffing shortages or the NHC’s vacancies.Three meteorologists speaking on the panel echoed Cantwell’s concerns, suggesting that staffing shortages at weather offices across the country risk forecasting errors and breakdowns in communication between meteorologists and emergency managers.At least eight local weather offices across the country are currently so short-staffed that they can no longer cover their overnight shifts, said Brian LaMarre, a former meteorologist-in-charge at the NWS office in Tampa Bay, Florida. Some of these offices may have to rely on “mutual aid,” or borrowed staff, from other NWS locations to cover their shifts during extreme weather events.But Cantwell and other panelists expressed concern that staff-sharing across the NWS could erode the accuracy of forecasts and warnings for local communities.Cantwell pointed to the meteorologists that specialize in fire weather forecasts. NOAA typically deploys those experts to provide forecasts and recommendations to firefighters on the ground when wildfires strike.“If you think you're gonna substitute somebody that’s gonna be somewhere else — I don’t know where, some other part of the state or some other state — and you think you're gonna give them accurate weather information? It just doesn't work that way,” she said.Washington state-based broadcast meteorologist Jeff Renner echoed her concerns.“The meteorologists that respond to [wildfires] have very specific training and very specific experience that can’t be easily duplicated, particularly from those outside the area,” he said.Meanwhile, LaMarre’s former position in Tampa is vacant, and around 30 other offices across the country are also operating without a permanent meteorologist-in-charge.“That person is the main point of contact when it comes to briefing elected officials, emergency management directors, state governors, city mayors, parish officials,” LaMarre said. “They are the individual that’s gonna be implementing any new change that is needed for hurricane season, blizzards, wildfires, inland flooding.”The NWS suffered from staffing shortages prior to the Trump administration. But LaMarre said he never saw such widespread vacancies, including offices unable to operate overnight, in his 30 years at the agency.He emphasized that NWS meteorologists will do whatever it takes to ensure accurate forecasts when extreme weather strikes. But too many gaps at local offices mean that some services will inevitably suffer, LaMarre added.“Whenever you look at an office that is short-staffed, that means a piece of that larger puzzle is taken away,” he said. “That means some outreach might not be able to occur. Some trainings might not be able to occur. Some briefings to officials might not be able to occur.”Reprinted from E&E News with permission from POLITICO, LLC. Copyright 2025. E&E News provides essential news for energy and environment professionals.