Serverless computing has proliferated across cloud platforms, yet its core principles are widely misunderstood and misused. Much of the industry treats serverless as being synonymous with infrastructure abstraction or automatio

ZDNET's key takeaways The OnePlus 13 is a snappy, nearly no-compromise phone that starts at $899. A Snapdragon 8 Elite, paired with a 6,000mAh battery and 80W fast charging, is a recipe for endurance success. IP69 is almost excessive, but you'll appreciate it when least expected. $999.99 at Best Buy apr / 2025Over at OnePlus' website, both OnePlus 13 models are on sale for $50 off, and each purchase comes with a free gift. Options include a OnePlus Nord Buds 3 Pro and a Sandstone Magnetic Case.It's not often that I review a smartphone in the first few calendar weeks and feel confident in calling it a "Phone of the Year" contender. But when I tested the OnePlus 13 back in January, that's precisely what happened.Whether Google finally launches a Pixel Pro Fold with a flagship camera system this summer, or Apple releases a thinner iPhone in the fall, the OnePlus 13 will likely still be on my mind when the year-end nominations are due.Also: I changed 10 OnePlus phone settings to significantly improve the user experienceThere's a lot going for the latest flagship phone, from the more secure (and reliable) ultrasonic fingerprint sensor to the IP69 rating to the 6,000mAh Silicon NanoStack battery. It's also one of the first phones in North America to feature Qualcomm's new Snapdragon 8 Elite chip, which promises improvements to performance, efficiency, and AI workloads.I tested the OnePlus 13 alongside my iPhone 16 Pro Max and Google Pixel 9 Pro XL to see exactly how the Android phone stacked up against one of the best phones from 2024. In a few ways, the OnePlus 13 falls short, but in many ways, it puts the iPhone and Pixel to shame.When I first unboxed the OnePlus 13 and held it in my hand, my reaction was audible. Allow me to geek out here: The slightly curved glass, the slimness of the phone, and the overall appearance made my then-four-month-old iPhone look and feel outdated. It's as if OnePlus made the iPhone 17 Air before Apple did.However, what sells the OnePlus 13 design for me is the new Midnight Ocean color, which flaunts a vegan-leather backing that makes the phone visually distinctive and more comfortable to hold than its glass-only predecessors. The texture isn't as rough and grippy as actual leather, though, so I'd be interested in seeing how it ages over the year. (April update: The textured backing is holding up well, save for a few dark spots on the corners, likely caused by the phone rubbing against my palms.) Kerry Wan/ZDNETIf you were hoping the first major Android phone of 2025 would feature Qi2 wireless charging, I have good news and bad news. While the OnePlus 13 doesn't have an in-body Qi2 charging coil, meaning MagSafe (and similar) accessories won't attach directly to the back of the device, OnePlus has embedded magnetic guides within its protective covers, enabling users to take advantage of the accessories so long as the OnePlus 13 is encased. It's a burdenless workaround, but one that hopefully won't be necessary with the next model.For what it's worth, since publishing this review, several other Android phones have been released, including the Samsung Galaxy S25 Ultra, Nothing Phone 3a Pro, and Motorola Razr Ultra -- none of which feature Qi2 wireless charging.For years, one aspect that's held OnePlus phones back is the water and dust resistance rating, or lack thereof. With the OnePlus 13, the company is finally taking a stronger stance on the endurance standard, certifying the phone with an IP69 rating. It's a step above the IP68 ratings we commonly see on competing devices, and allows the OnePlus 13 to withstand high-pressure, high-temperature water jets and humidity changes.Also: 5 habit trackers on Android that can reveal your patterns - and motivate you to changeIn practice, this means the OnePlus 13 can function properly even if you leave it in your washer and dryer, dishwasher, or a pot of boiling soup. The IP69 rating feels very much like a flex, but it's a benefit that users will appreciate when they least expect it. Kerry Wan/ZDNETPowering the device is a Qualcomm Snapdragon 8 Elite chip that, from my months of usage, has some noticeable strengths and weaknesses. For day-to-day usage, such as bouncing between productivity apps, definitely not scrolling through TikTok, and taking photos and videos, the processor handles tasks gracefully. It helps that OxygenOS 15, based on the latest version of Android, has some of the smoothest animations I've seen on a phone.Also: I found a Bluetooth tracker for Android users that functions better than AirTags (and it's cheaper)But once you fire up graphics-intensive applications like Adobe Premiere Rush and Honkai Star Rail, you'll notice some stuttering as the higher heat development leads to throttling performance. This isn't a dealbreaker, per se, as the nerfs are only apparent when you're using the device for a prolonged time.I've actually been using the OnePlus 13 quite liberally, as the 6,000mAh Silicon NanoStack battery has kept my review unit running for at least a day and a half per charge. That's unseen with any other mainstream phone in the US market, and I fully expect more manufacturers to adopt silicon batteries for their greater energy density. If not that, copy the 80W fast charging or 50W wireless charging; they're quite the revelation. Kerry Wan/ZDNETOn the camera front, the OnePlus 13, with its triple camera setup (50MP wide, ultrawide, and telephoto), has been a reliable shooter throughout most of my days. While the Sony LYT-808 sensor isn't on par with the one-inch sensors I've tested on international phones like the Xiaomi 15 Ultra, it does an excellent job of capturing details and finishing the output vividly. If you're a fan of sharp, bright, and slightly oversaturated imagery (read: more colorful than how the actual subject appears), then the OnePlus 13 will serve you well.Also: The best Android phones to buy in 2025Where the camera sensors fall short is in post-processing and AI-tuning features. For example, the phone leans heavily on computational photography to contextualize details when taking far-distance shots. This sometimes leads to images with an artificial, over-smoothing filter. But when the backend software works, it can reproduce details that you probably didn't think you'd capture in the first place.ZDNET's buying adviceFor a starting price of $899, the OnePlus 13 delivers some seriously good value -- possibly the best of all the major flagship phones I've tested so far this year. The company has improved the device in almost every way, from the design to the performance to its accessory ecosystem. I just wish OnePlus offered more extensive software support, as the OnePlus 13 will only receive four years of Android OS updates and six years of security updates. Samsung, Google, and Apple offer at least seven years of OS support. If you can shoulder the shorter promise of longevity, this is one of the easiest phones for me to recommend right now. Why the OnePlus 13 gets an Editors' Choice award We awarded the OnePlus 13 an Editors' Choice because it nails all the fundamentals of a great smartphone experience while leading the market in some regards, such as battery and charging, durability, and design. The specs this year are noticeably improved compared to its predecessor, the OnePlus 12, with a faster processor, lighter build, larger battery capacity, and a more capable camera system. Most importantly, the OnePlus 13 starts at $899, undercutting its closest competitors like the Google Pixel 9 Pro XL and Samsung Galaxy S25 Ultra. Show more When will this deal expire? As per OnePlus, this offer will end on June 8, 2025.However, deals are subject to sell out or expire at any time, though ZDNET remains committed to finding, sharing, and updating the best product deals for you to score the best savings. Our team of experts regularly checks in on the deals we share to ensure they are still live and obtainable. We're sorry if you've missed out on a deal, but don't fret -- we constantly find new chances to save and share them with you on ZDNET.com.  Show more What are the tariffs in the US? The recent US tariffs on imports from countries like China, Vietnam, and India aim to boost domestic manufacturing but are likely to drive up prices on consumer electronics. Products like smartphones, laptops, and TVs may become more expensive as companies rethink global supply chains and weigh the cost of shifting production.Smartphones are among the most affected by the new US tariffs, with devices imported from China and Vietnam facing steep duties that could raise retail prices by 20% or more. Brands like Apple and Google, which rely heavily on Asian manufacturing, may either pass these costs on to consumers or absorb them at the expense of profit margins. The tariffs could also lead to delays in product launches or shifts in where and how phones are made, forcing companies to diversify production to countries with more favorable trade conditions. Show more This story was originally published on January 7, 2025, and was updated on June 1, 2025, adding information for a new June discount.Featured reviews

The lab as we know it today is being transformed by how we think about medical research and drug discovery, as well as the intersection of artificial intelligence and biotechnology. As someone who has transitioned from a doctor to a tech CEO, I’ve witnessed firsthand how our mindset around medicine and innovation needs to evolve to keep pace with the accelerating changes in technology. In my journey, one of the most important lessons I’ve learned is: You can be too smart for your own good. It may sound counterintuitive, but when building a company or investing in new technologies, the smartest people often fall into the trap of overcomplicating things. A brilliant idea isn’t always enough. You need the right people who can think creatively, take risks, and make it happen in the real world. For me, the mindset shift from doctor to CEO was about understanding that it’s not just about medical knowledge; it’s about building the right ecosystem to nurture that knowledge and turn it into real and transformative change. I believe that a crucial part of that ecosystem for my company, Owkin, is a new form of intelligence: a biological artificial superintelligence (BASI) to complement the ingenious human minds working with us. Next generation AI tools, like K Navigator, Owkin’s agentic co-pilot for researchers, and K Pro for pharma, which is in the pipeline, will allow us to understand the full complexity of biology that has been beyond human understanding so far. This forms the backbone of Owkin’s mission: We are creating the next-generation pharma focused on discovering cures and significantly enhancing pipeline value by developing a new intelligence system capable of decoding biological truths at scale. AI can fill the innovation gap left by pharma As the pharmaceutical industry increasingly focuses on a handful of blockbuster drugs, it’s leaving behind many areas of medicine that are crucial for the future of healthcare. Too many diseases remain uncured as traditional pharma struggles to navigate the complexity of biology to augment care with efficient new molecules and diagnostics. From rare diseases to precision oncology, there’s an innovation gap that AI is perfectly positioned to fill. AI can identify previously overlooked opportunities and streamline the development of treatments that are highly personalized and targeted. Unlike traditional pharmaceutical companies that are heavily reliant on large-scale, high-risk projects, AI companies can operate in a more agile, data-driven way. We can make smaller, more informed bets, leveraging machine learning and vast datasets to uncover insights that were once out of reach. This shift enables faster and more efficient drug discovery, with the added benefit of offering solutions for diseases that may not have attracted the attention of big pharma. Cell lines alone aren’t going to work Most traditional biological research has been based on cell lines—cells removed from the human body and grown in petri dishes. But as we look to the future, there’s a growing realization that cell lines, and other traditional research methods, are becoming outdated. While once a staple in biomedical research, they do not accurately replicate the complexity of human biology, and they fail to capture the diversity and variability that exists in real patients. AI-driven models are capable of moving beyond the limitations of cell lines by integrating data both from research done in cells and tissues removed from the body (in vitro) and from research done in living animals (in vivo). This validation approach, which incorporates multiple data types and sources, allows us to create more reliable and predictive models of human diseases. Science is advancing, and so is regulation. The FDA’s recent announcement of plans to phase out animal testing in favor of “more effective, human-relevant methods” means that we are entering an era where therapies can be tested on human tissue models from the very start. In collaboration with leading academic centers, Owkin has developed a patient-derived, lab-grown organoid (a mini version of a human organ), a breakthrough that brings us closer to faster, more accurate, and humane drug discovery. The combination of clinical data, genomic insights, and AI not only accelerates the development of new treatments but also increases their chances of success in clinical trials. The lab of the future The lab of the future will be one where AI is at the center, guiding discovery, improving precision, and increasing efficiency. Validation using real-world data will allow us to make better decisions and achieve higher rates of success. The traditional research process is being upended by these new technologies, and that’s a good thing. The future of medicine will not just rely on human expertise, but on the power of AI and data to transform how we understand and treat disease. AI will deliver transformative therapies at an exponential scale, addressing the complexities of biology that traditional pharmaceutical approaches often cannot solve. Labs will become automated and serve as the ultimate playground for scientists, driving the future of drug discovery by harnessing the full potential of advanced AI systems. In these dynamic labs, organoids and agents will come together to work in synergy, allowing scientists to model and simulate human biology with greater accuracy. AI-driven technology will decipher biological patterns to identify the patients most likely to respond to specific treatments, significantly improving the chances of success in clinical trials and beyond. Seamlessly integrating these cutting-edge tools into the lab environment will transform the way we approach drug discovery, targeting diseases with a level of precision that was previously unimaginable. By pioneering the use of data, biology, and AI to decode the fundamental mechanics of disease and advance medical science, it will be possible to establish a foundation for the future of a “positive singularity” in medicine. Through this innovative ecosystem, AI can revolutionize medicine. The time to innovate is now, and the possibilities are endless. Thomas Clozel is cofounder and CEO of Owkin.

ExpressVPN is good at its job. It's easy to be skeptical of any service with a knack for self-promotion, but don't let ExpressVPN's hype distract you from the fact that it keeps its front-page promise of "just working." Outside of solid security, the two best things ExpressVPN offers are fast speeds and a simple interface. Our tests showed only a 7% average drop in download speed and a 2% loss of upload speed, worldwide. And while the lack of extra features may frustrate experienced users, it makes for a true set-and-forget VPN on any platform. This isn't to say ExpressVPN is without flaws — it's nearly bereft of customization options and it's notably more expensive than its competition — but it beats most VPNs in a head-to-head matchup. For this review, we followed our rigorous 10-step VPN testing process, exploring ExpressVPN's security, privacy, speed, interfaces and more. Whether you read straight through or skip to the sections that are most important for you, you should come away with all the information you need to decide whether to subscribe. Editors' note: We're in the process of rebooting all of our VPN reviews from scratch. Once we do a fresh pass on the top services, we'll be updating each review with a rating and additional comparative information. Table of contents Findings at a glance Installing, configuring and using ExpressVPN ExpressVPN speed test: Very fast averages ExpressVPN security test: Checking for leaks How much does ExpressVPN cost? ExpressVPN side apps and bundles Close-reading ExpressVPN's privacy policy Can ExpressVPN change your virtual location? Investigating ExpressVPN's server network Extra features of ExpressVPN ExpressVPN customer support options ExpressVPN background check: From founding to Kape Technologies Final verdict Findings at a glance Category Notes Installation and UI All interfaces are clean and minimalist, with no glitches and not enough depth to get lost in Windows and Mac clients are similar in both setup and general user experience Android and iOS are likewise almost identical, but Android has a nice-looking dark mode Speed Retains a worldwide average of 93% of starting download speeds Upload speeds average 98% of starting speeds Latency rises with distance, but global average stayed under 300 ms in tests Security OpenVPN, IKEv2 and Lightway VPN protocols all use secure ciphers Packet-sniffing test showed working encryption We detected no IP leaks Blocks IPv6 and WebRTC by default to prevent leaks Pricing Base price: $12.95 per month or $99.95 per year Lowest prepaid rate: $4.99 per month Can save money by paying for 28 months in advance, but only once per account 30-day money-back guarantee Bundles ExpressVPN Keys password manager and ID alerts included on all plans Dedicated IP addresses come at an extra price ID theft insurance, data removal and credit scanning available to new one-year and two-year subscribers for free 1GB eSIM deal included through holiday.com Privacy policy No storage of connection logs or device logs permitted The only risky exceptions are personal account data (which doesn't leave the ExpressVPN website) and marketing data (which the policy says should be anonymized) An independent audit found that ExpressVPN's RAM-only server infrastructure makes it impossible to keep logs Virtual location change Successfully unblocked five international Netflix libraries, succeeding on 14 out of 15 attempts Server network 164 server locations in 105 countries 38% of servers are virtual, though most virtual locations are accessed through physical servers within 1,000 miles A large number of locations in South America, Africa and central Asia Features Simple but effective kill switch Can block ads, trackers, adult sites and/or malware sites but blocklists can't be customized Split tunneling is convenient but unavailable on iOS and modern Macs Aircove is the best VPN router, albeit expensive Customer support Setup and troubleshooting guides are organized and useful, with lots of screenshots and videos Live chat starts with a bot but you can get to a person within a couple minutes Email tickets are only accessible from the mobile apps or after live chat has failed Background check Founded in 2009; based in the British Virgin Islands Has never been caught selling or mishandling user data Turkish police seized servers in 2017 but couldn't find any logs of user activity Owned by Kape Technologies, which also owns CyberGhost and Private Internet Access A previous CIO formerly worked on surveillance in the United Arab Emirates; no evidence of shady behavior during his time at ExpressVPN Windows Version 12 leaked some DNS requests when Split Tunneling was active Installing, configuring and using ExpressVPN This section focuses on how it feels to use ExpressVPN on each of the major platforms where it's available. The first step for any setup process is to make an account on expressvpn.com and buy a subscription. Windows Once subscribed, download the Windows VPN from either expressvpn.com or the Microsoft Store, then open the .exe file. Click "Yes" to let it make changes, wait for the install, then let your computer reboot. Including the reboot, the whole process takes 5-10 minutes, most of it idle. To finish, you'll need your activation code, which you can find by going to expressvpn.com and clicking "Setup" in the top-right corner. You can install ExpressVPN's Windows app from the Microsoft store, but we found the website more convenient. Sam Chapman for Engadget Extreme simplicity is the watchword for all ExpressVPN's designs. The Windows client's launch panel consists of three buttons and less than ten words. You can change your location or let the app pick a location for you — the "Smart Location" is the server with the best combination of being nearby and unburdened. Everything else is crammed into the hamburger menu at the top left. Here, in seven tabs, you'll find the Network Lock kill switch, the four types of content blockers, the split tunneling menu and the option to change your VPN protocol. You can also add shortcuts to various websites, useful if you regularly use your VPN for the same online destinations. To sum up, there's almost nothing here to get in the way: no delays, no snags, no nested menus to get lost in. It may be the world's most ignorable VPN client. That's not a bad thing at all. Mac ExpressVPN's app for macOS is almost identical in design to its Windows app. The process for downloading and setting it up is nearly the same too. As on Windows, it can be downloaded from the App Store or sideloaded directly from the expressvpn.com download center. Only a few features are missing and a couple others have been added. Split tunneling is gone (unless you're still on a macOS lower than 11), and you won't see the Lightway Turbo setting. ExpressVPN recommends some servers, but it's easy to search the whole list. Sam Chapman for Engadget Mac users do gain access to the IKEv2 protocol, along with the option to turn off automatic IPv6 blocking — Windows users have to leave it blocked at all times. Almost every website is still accessible via IPv4, but it's useful if you do need to access a specific IPv6 address while the VPN is active. Android Android users can download ExpressVPN through the Google Play Store. Open the app, sign in and you're ready to go. The Android app has a very nice dark-colored design, only slightly marred by an unnecessary information box about how long you've used the VPN this week. ExpressVPN's Android app puts a little more information on the screen than it needs to, but still runs well. Sam Chapman for Engadget There's a large button for connecting. Clicking on the server name takes you to a list of locations. On this list, you can either search or scroll and can choose individual locations within a country that has more than one. We connected to as many far-flung server locations as we could, but not a single one took longer than a few seconds. The options menu is organized sensibly, with no option located more than two clicks deep. You will see a couple of options here that aren't available on desktop, the best of which is the ability to automatically connect to your last-used ExpressVPN server whenever your phone connects to a non-trusted wifi network. There are also a few general security tools: an IP address checker, DNS and WebRTC leak testers and a password generator. These are also available on the website, but here, they're built into the app. With the exception of the latter, we'd recommend using third-party testing tools instead — even a VPN with integrity has an incentive to make its own app look like it's working. iPhone and iPad You can only install ExpressVPN's iOS app through the app store. During setup, you may need to enter your password to allow your phone to use VPN configurations. Otherwise, there are no major differences from the Android process. ExpressVPN looks good on iPhone and iPad. Sam Chapman for Engadget The interface is not quite as pleasing as the dark-mode Android app, but it makes up for that by cutting out some of the clutter. The tabs and features are similar, though split tunneling and shortcuts are absent. Also, both mobile apps make customer support a lot more accessible than their desktop counterparts — plus, mobile is the only way to send email support tickets. Browser extension ExpressVPN also includes browser extensions for Firefox and Chrome. These let you connect, disconnect and change server locations without leaving your browser window. It's nice, but not essential unless you have a very specific web browser flow you like. ExpressVPN speed test: Very fast averages Connecting to a VPN almost always decreases your speed, but the best VPNs mitigate the drop as much as possible. We used Ookla's speed testing app to see how much of your internet speed ExpressVPN preserves. For this test, we emphasized the locations ExpressVPN uses for most of its virtual servers, including the Netherlands, Brazil, Germany and Singapore. Some terms before we start: Latency, measured in milliseconds (ms), is the time it takes one data packet to travel between your device and a web server through the VPN. Latency increases with distance. It's most important for real-time tasks like video chatting and online gaming. Download speed, measured in megabits per second (Mbps), is the amount of information that can download onto your device at one time — such as when loading a web page or streaming a video. Upload speed, also measured in Mbps, is the amount of information your device can send to the web at once. It's most important for torrenting, since the amount of data you can seed determines how fast you can download in exchange. The table below shows our results. We conducted this on Windows, using the automatic protocol setting with the Lightway Turbo feature active — a recent ExpressVPN addition that keeps speed more consistent by processing connections in parallel. Server location Latency (ms) Increase factor Download speed (Mbps) Percentage dropoff Upload speed (Mbps) Percentage dropoff Portland, Oregon, USA (unprotected) 18 -- 58.77 -- 5.70 -- Seattle, Washington, USA (best server) 26 1.4x 54.86 6.7% 5.52 3.2% New York, NY, USA 156 8.7x 57.25 2.6% 5.57 2.3% Amsterdam, Netherlands 306 17x 53.83 8.4% 5.58 2.1% São Paulo, Brazil 371 20.6x 53.82 8.4% 5.65 0.9% Frankfurt, Germany 404 22.4x 55.71 5.2% 5.67 0.5% Singapore, Singapore 381 21.2x 52.76 10.2% 5.64 1.0% Average 274 15.2x 54.71 6.9% 5.61 1.6% These are extremely good results. ExpressVPN is a winner on both download and upload speed. No matter where we went in the world, we never lost more than about 7% of our download speeds, and upload lost an astoundingly low average of 2%. This suggests that ExpressVPN deftly distributes its user load between servers to eliminate bottlenecks. This Ookla speedtest shows you can still get fast internet while connected to ExpressVPN -- our unprotected speeds are around 58 Mbps. Sam Chapman for Engadget The latency numbers look worse, but the rise in the table is less sharp than we projected. Ping length depends far more on distance than download speed does, so we expect it to shoot up on servers more than 1,000 miles from our location. Keeping the average below 300 ms, as ExpressVPN does here, is a strong showing. ExpressVPN security test: Checking for leaks A VPN's core mission is to hide your IP address and make you untraceable online. Our task in this section is to figure out if ExpressVPN can carry out this mission every time you connect. While we can't be 100% certain, the tests we'll run through below have led us to believe that ExpressVPN is currently leak-proof. Available VPN protocols A VPN protocol is like a common language that a VPN server can use to mediate between your devices and the web servers you visit. If a VPN uses outdated or insecure protocols, or relies on unique protocols with no visible specs or source code, that's a bad sign. Not all protocols are available on all apps, but Mac has the full range. Sam Chapman for Engadget ExpressVPN gives you a selection of three protocols: IKEv2, OpenVPN and Lightway. The first two are solid choices that support the latest encryption algorithms. OpenVPN has been fully open-source for years and is the best choice if privacy is your goal. While IKEv2 started life as a closed project by Microsoft and Cisco, ExpressVPN uses an open-source reverse-engineering, which is both better for privacy and quite fast. Lightway is the odd one out, a protocol you'll only find on ExpressVPN, though its source code is available on Github. It's similar to WireGuard, in that both reach for faster speeds and lower processing demands by keeping their codebases slim. However, Lightway was recently rewritten in Rust to better protect the keys stored in its memory. Ultimately, you can't go wrong with any of ExpressVPN's protocol options. 99% of the time, your best choice will be to set the controls to Automatic and let the VPN decide which runs best. Testing for leaks ExpressVPN is one of the best services, but it's not leak-proof (as you can read in the Background Check below). Luckily, checking for DNS leaks is a simple matter of checking your IP address before and after connecting to a VPN server. If the new address matches the VPN server, you're good; if not, your VPN is leaking. First, we checked the Windows app with split tunneling active to ensure the flaw really had been patched. We tested several servers and didn't find any leaks, which suggests the patch worked, though leaks were rare even before ExpressVPN fixed the vulnerability. We checked our IP while connected to the virtual India location, which is run from a physical server in Singapore. Don't worry -- it still looks like India to streaming services. Sam Chapman for Engadget In fact, we didn't find any leaks on any ExpressVPN server we tested on any platform. Though questions remain about iOS, as you'll see later in this section, that's a problem on Apple's end that even the best VPNs can do very little about for now. The most common cause of VPN leaks is the use of public DNS servers to connect users to websites, which can mistakenly send browsing activity outside the VPN's encrypted tunnel. ExpressVPN avoids the risks of the public system by installing its own DNS resolvers on every server. This is the key factor behind its clean bill of health in our leak testing. Two other common flaws can lead to VPN leaks: WebRTC traffic and IPv6. The former is a communication protocol used in live streaming and the latter is a new IP standard designed to expand domain availability. Both are nice, but currently optional, so ExpressVPN automatically blocks both to ensure there's no opportunity for leaks to arise. One note about VPN security on iOS: it's a known and continuing problem that iOS VPNs do not prevent many online apps from communicating with Apple directly, outside the VPN tunnel. This risks leaking sensitive data, even with Lockdown Mode active in iOS 16. A blog post by Proton VPN shares a workaround: connect to a VPN server, then turn Airplane Mode on and off again to end all connections that were active before you connected to the VPN. Testing encryption We finished up our battery of security tests by checking out ExpressVPN's encryption directly. Using WireShark, a free packet sniffer, we inspected what it looks like when ExpressVPN transmits data from one of its servers to the internet. The screenshot below shows a data stream encrypted with Lightway UDP. After connecting to ExpressVPN, HTTP packets were rendered unreadable while in transit. Sam Chapman for Engadget That lack of any identifiable information, or even readable information, means encryption is working as intended. We repeated the test several times, always getting the same result. This left us satisfied that ExpressVPN's core features are working as intended. How much does ExpressVPN cost? ExpressVPN subscriptions cost $12.95 per month. Long-term subscriptions can bring the monthly cost down, but the great deals they offer tend to only last for the first billing period. A 12-month subscription costs $99.95 and includes three months for free with your first payment, costing a total of $6.67 per month. The bonus disappears for all subsequent years, raising the monthly cost to $8.33. You can also sign up for 28 months at a cost of $139.72, but this is also once-only — ExpressVPN can only be renewed at the $99.95 per year level. There are two ways to test ExpressVPN for free before making a financial commitment. Users on iOS and Android can download the ExpressVPN app without entering any payment details and use it free for seven days. On any platform, there's a 30-day money-back guarantee, which ExpressVPN has historically honored with no questions asked. You will have to pay before you can use it, though. In our opinion, ExpressVPN's service is solid enough that it's worth paying extra. Perhaps not this much extra, but that depends on what you get out of it. We recommend using the 30-day refund period and seeing how well ExpressVPN works for you. If it's a VPN you can enjoy using, that runs fast and unblocks everything you need, that's worth a server's weight in gold. ExpressVPN side apps and bundles ExpressVPN includes some special features that work mostly or wholly separate from its VPN apps. Some of these come free with a subscription, while others add an extra cost. Every subscription includes the ExpressVPN keys password manager. This is available under its own tab on the Android and iOS apps. On desktop, you'll need to download a separate extension from your browser's store, then sign in using your account activation code. It's available on all Chromium browsers, but not Firefox. Starting in 2025, new subscribers get an eSIM plan through holiday.com, a separate service linked to ExpressVPN. The baseline 1GB holiday eSIM plans last for 5 days and can apply to countries, regions, or the entire world (though it's not clear whether the package deal applies to the regional and global plans). Longer-term plans include larger eSIM plans. You can add a dedicated IP address to your ExpressVPN subscription for an additional cost per month. A dedicated IP lets you use the same IP address every time you connect to ExpressVPN. You can add the address to whitelists on restricted networks, and you're assured to never be blocked because of someone else's bad activity on a shared IP. Unlike many of its competitors, ExpressVPN doesn't currently offer antivirus or online storage services, but there is a comprehensive bundle of ID protection tools called Identity Defender. We haven't reviewed any of these products in detail, but here's a list for reference: ID Alerts will inform you if any of your sensitive information is leaked or misused online. It's free with all plans, but you'll have to enter your personal information on your ExpressVPN account page or a mobile app. ID Theft Insurance grants up to $1 million in identity theft reimbursement and comes free with new ExpressVPN one-year or two-year subscriptions. It's not yet available to those who subscribed before it launched in October 2024. Data Removal scans for your information in data brokerages and automatically requests that it be deleted. It's also free with one-year and two-year plans. Credit Scanner is only available for United States users. It monitors your activity on the three credit bureaus so you can quickly spot any suspicious transactions. The Identity Defender features are currently only available to new ExpressVPN customers in the US. Close-reading ExpressVPN's privacy policy Although we worry that the consolidation of VPN brands under the umbrella of Kape Technologies (ExpressVPN's parent company) will make the industry less competitive, we don't believe it's influencing ExpressVPN to take advantage of its users' privacy. To confirm, and get a full sense of what sort of privacy ExpressVPN promises its users, we set out to read ExpressVPN's privacy policy in detail. It's long, but thankfully aimed at casual users instead of lawyers. You can see it for yourself here. In the introduction, ExpressVPN states that it does not keep either activity logs (such as a user's browsing history while connected to the VPN) or connection logs (such as the duration of a user's session and their IP address, which can be used to extrapolate browsing activity). It then specifies the seven types of data it's legally allowed to collect: Data used to sign up for an account, such as names, emails and payment methods. VPN usage data which is aggregated and can't be traced to any individual. Credentials stored in the ExpressVPN Keys password manager. Diagnostic data such as crash reports, which are only shared upon user request. IP addresses authorized for MediaStreamer, which is only for streaming devices that don't otherwise support VPN apps. Marketing data collected directly from the app — a "limited amount" that's kept anonymous. Data voluntarily submitted for identity theft protection apps. Of those seven exceptions, the only ones that count as red flags are account data and marketing data. Both categories are highly personal and could be damaging if mishandled. Fortunately, complying with subpoenas is not one of the allowed uses listed for either data category, nor does the policy let ExpressVPN sell the data to other private parties. The only really annoying thing here is that if you ask ExpressVPN to delete your personal data, you won't be able to use your account from then on. You aren't even eligible for a refund in this case, unless you're within 30 days of your initial subscription. As for marketing data, ExpressVPN collects device fingerprints and location data when you sign up for an account on its website. The privacy policy also claims this is anonymized, as its "systems are engineered to decouple such data from personally identifiable information." Audits corroborate this, as we'll see in the next section. So, while it would be better if ExpressVPN didn't collect any personal data at all, its practices don't appear to pose a risk to anything you do while using the VPN — just the ExpressVPN website. Privacy audits VPN providers often get third-party accounting firms to audit their privacy policies. The idea is that a well-known firm won't mortgage its reputation to lie on behalf of a VPN, so their results can be trusted. For the last several years, ExpressVPN has had KPMG look over its privacy policy and relevant infrastructure (see "TrustedServer" below). KPMG's most recent report, completed in December 2023 and released in May 2024, found that ExpressVPN had enough internal controls in place that users could trust its privacy policy. The report is freely available to read. This is a very good sign, though we're looking out for a more up-to-date audit soon. TrustedServer "TrustedServer" is a marketing term ExpressVPN uses for its RAM-only server infrastructure. RAM-only servers have no hard drives for long-term storage and return to a standard disk image with every reboot. This makes it theoretically impossible to store user activity logs on them, even if ExpressVPN wanted to do that. The KPMG audit, linked above, reports that TrustedServer works as advertised. Between its many clean privacy audits and the Turkish server incident in 2017, we're prepared to say ExpressVPN is a private VPN, in spite of its aggravating exception for marketing. Can ExpressVPN change your virtual location? Next, we tested whether ExpressVPN can actually convince websites that you're somewhere other than your real location. Our security tests have already proven it can hide your IP address, but it takes more than leak-proofing to fool streaming sites these days — Netflix and the others have gotten very good at combing through metadata to sniff out proxy users. The process for testing this is a lot like how we handled the DNS leak tests: try several different servers and see if we get caught. We checked five sample locations outside the U.S. to see if we a) got into Netflix and b) saw different titles in the library. The results are below. Server Location Unblocked Netflix? Library changed? Canada Y Y United Kingdom Y (second try; Docklands failed) Y Slovakia Y Y India Y Y (different from UK library) Australia Y Y In fifteen tests, ExpressVPN slipped up only once. Docklands, the UK server it chose as the fastest, wasn't able to access Netflix. We switched to a server labeled simply "London" and unblocked it without issue. ExpressVPN can change your virtual location so you can explore the wonderful world of K-drama. Sam Chapman for Engadget All the other locations got us access to an alternate Netflix library on the first try. We even checked whether the India server, which is physically located in the UK, showed us different videos than the UK servers. It did, which makes us even more confident that ExpressVPN's virtual locations are airtight. Investigating ExpressVPN's server network ExpressVPN users can connect to a total of 164 server locations in 105 countries and territories. These locations are reasonably well distributed across the globe, but as with all VPNs, there's a bias toward the northern hemisphere. There are 24 locations in the U.S. alone and a further 66 in Europe. That isn't to say users in the Global South get nothing. ExpressVPN has IP addresses from nine nations in South America (Argentina, Brazil, Bolivia, Chile, Colombia, Ecuador, Peru, Uruguay and Venezuela) and six in Africa (Algeria, Egypt, Ghana, Kenya, Morocco and South Africa). The network even includes Kazakhstan, Uzbekistan and Mongolia, impressive since central Asia may be the region most often shafted by VPNs. However, many of these servers have virtual locations different from their real ones. For those of you choosing a server based on performance instead of a particular IP address, ExpressVPN's website has a helpful list of which servers are virtual. The bad news is that it's a big chunk of the list. A total of 63 ExpressVPN locations are virtual, or 38% of its entire network. To reduce the sting, ExpressVPN takes care to locate virtual servers as close to their real locations as possible. Its virtual locations in Indonesia and India are physically based in Singapore. This isn't always practical, leading to some awkwardness like operating a Ghana IP address out of Germany. But it helps ExpressVPN perform better in the southern hemisphere. Extra features of ExpressVPN Compared to direct competitors like NordVPN and Surfshark, ExpressVPN doesn't have many special features. It's aimed squarely at the casual market and will probably disappoint power users. Having said that, what they do include works well. In this section, we'll run through ExpressVPN's four substantial features outside its VPN servers themselves. Network Lock kill switch "Network Lock" is the name ExpressVPN gives to its kill switch (though it's called "Network Protection" on mobile). A VPN kill switch is a safety feature that keeps you from broadcasting outside the VPN tunnel. If it ever detects that you aren't connected to a legitimate ExpressVPN server, it cuts off your internet access. You won't be able to get back online until you either reconnect to the VPN or disable Network Lock. ExpressVPN's kill switch is called Network Lock on desktop, and Network Protection on mobile (Android pictured) Sam Chapman for Engadget This is important for everyone, not just users who need to hide sensitive traffic. The recently discovered TunnelVision bug theoretically allows hackers to set up fake public wi-fi networks through which they redirect you to equally fake VPN servers, which then harvest your personal information. It's unlikely, but not impossible, and a kill switch is the best way to prevent it — the switch always triggers unless you're connected to a real server in the VPN's network. Like most of ExpressVPN's features, all you can do with Network Lock is turn it on and off. You can also toggle whether you'll still be able to access local devices while the kill switch is blocking your internet — this is allowed by default. Threat manager, ad blocker and parental controls ExpressVPN groups three tools under the heading of "advanced protection" — Threat Manager, an ad blocker and parental controls. Threat Manager consists of two checkboxes: one that blocks your browser from communicating with activity tracking software and one that blocks a list of websites known to be used for malware. Check any of these boxes to use the pre-set blocklists whenever you're connected to ExpressVPN. Sam Chapman for Engadget You can't customize the lists, so you're limited to what ExpressVPN considers worthy of blocking. They share their sources on the website. While the lists are extensive and open-source, they rely on after-the-fact reporting and can't detect and block unknown threats like a proper antivirus. The adblock and parental control options work the same way: check a box to block everything on the list, uncheck it to allow everything through. In tests, the ad blocker was nearly 100% effective against banner ads, but failed to block any video ads on YouTube or Netflix. The parental control option blocks a list of porn sites. It's an easy option for concerned parents, but only works while ExpressVPN is connected. As such, it's meant to be used in conjunction with device-level parental controls that prevent the child from turning off or uninstalling the VPN client. Split tunneling Sometimes, you'll find it helpful to have your device getting online through two different IP addresses at once — one for your home services and one for a location you're trying to spoof. That's where split tunneling is helpful: it runs some apps through the VPN while leaving others unprotected. This can also improve your speeds, since the VPN needs to encrypt less in total. You can configure split tunneling through either a blocklist or an allowlist. Sam Chapman for Engadget ExpressVPN includes split tunneling on Windows, Android and Mac (though only on versions 10 and below). You can only split by app, not by website, but it's still pretty useful. For example, you can have BitTorrent handling a heavy download in the background while you use your browser for innocuous activities that don't need protecting. ExpressVPN Aircove router By now, it should be clear that we find ExpressVPN to be a highly reliable but often unexceptional VPN service. However, there's one area in which it's a clear industry leader: VPN routers. ExpressVPN Aircove is, to our knowledge, the only router with a built-in commercial VPN that comes with its own dashboard interface. Usually, installing a VPN on your router requires tinkering with the router control panel, which turns off all but the most experienced users — not to mention making it a massive pain to switch to a new server location. Aircove's dashboard, by contrast, will be instantly familiar to anyone who already knows how to use an ExpressVPN client. It even allows different devices in your home to connect to different locations through the router VPN. Aircove's biggest drawback is its price. Currently retailing at $189 (not including an ExpressVPN subscription), it's around three times more expensive than an aftermarket router fitted with free VPN firmware. Some of you might still find the convenience worth the one-time payment. ExpressVPN customer support options ExpressVPN's written help pages are some of the best on the market. Its live chat is more of a mixed bag, and complex questions may cause delays. However, it is at least staffed with human agents who aim to reply accurately, rather than resolve your ticket as quickly as possible. You can directly access both live chat and email from ExpressVPN's mobile apps (on desktop, you'll have to go to the website). Sam Chapman for Engadget We approached ExpressVPN's support features with a simple question: "If I requested that ExpressVPN delete all my personal data, would I be able to get a refund for my unused subscription time?" (Remember from the Privacy Policy section that submitting a full deletion request also cancels your ExpressVPN account.) Our first stop was expressvpn.com/support, the written support center and FAQ page. It's divided into setup guides, troubleshooting, account management and information on each of ExpressVPN's products. The setup guides are excellent, including screenshots and clearly written steps; each one includes a video guide for those who learn better that way. Troubleshooting is just as good — no videos, but the same standards of clarity and usefulness prevail. The section starts with general problems, then delves into specific issues you might face on each operating system. Each article clearly derives from a real customer need. The live support experience To get answers on our refund question, we visited the account management FAQs. This section stated that the refund policy only applies within 30 days of purchase. Pretty clear-cut, but we still wanted an answer on our special case, so we contacted live chat by clicking the button at the bottom-right of every FAQ page. Live chat is in the bottom-right corner of every page of expressvpn.com. Sam Chapman for Engadget Live chat starts with an AI assistant, which is not too hard to get past — just ask it a question it can't answer, then click "Transfer to an Agent." We got online with (what claimed to be) a human in less than a minute. Answering the question took longer and involved an uncomfortable 10-minute silence, but we did get a clear verdict from a real person: refunds are within 30 days only, no matter what. If the live chat agent can't answer your question, you'll be redirected to open an email support ticket. Annoyingly, there's no way to go directly to email support through the website or desktop apps, though mobile users have the option to skip directly there. ExpressVPN background check: From founding to Kape Technologies ExpressVPN launched in 2009, which makes it one of the oldest consumer VPNs in continual operation. In more than 15 years of operation, it's never been caught violating its own privacy policy, though its record isn't free of more minor blemishes. Headquarters in the British Virgin Islands Founders Dan Pomerantz and Peter Burchhardt registered the company in the British Virgin Islands from the start to take advantage of that territory's favorable legal environment for online privacy. The BVIs have no law requiring businesses to retain data on their users, and the process for extraditing data is famously difficult, requiring a direct order from the highest court. In 2021, the BVI implemented the Data Protection Act (DPA) [PDF link], which prevents companies based in the territory from accessing data on their users anywhere in the world. It's a great privacy law in theory, modeled on best-in-class legislation in the EU. However, we couldn't find any evidence that its supervising authority — the Office of the Information Commissioner — has a leader or staff. In other words, while ExpressVPN is not legally required to log any data on its users, there's technically nobody stopping them from doing so. Whether you trust the jurisdiction depends on whether you trust the company itself. Let's see what the other evidence says. Security and privacy incidents Two significant incidents stand out from ExpressVPN's 16-year history. In 2017, when Andrei Karlov, Russia's ambassador to Turkey, was shot to death at an art show. Turkish police suspected someone had used ExpressVPN to mask their identity while they deleted information from social media accounts belonging to the alleged assassin. To investigate, they confiscated an ExpressVPN server to comb for evidence. They didn't find anything. A police seizure is the best possible test of a VPN's approach to privacy. The provider can't prepare beforehand, fake anything, or collude with investigators. The Turkey incident is still one of the best reasons to recommend ExpressVPN, though eight years is a long time for policy to change. The second incident began in March 2024, when a researcher at CNET informed ExpressVPN that its version 12 for Windows occasionally leaked DNS requests when users enabled the split tunneling feature. While these users remained connected to an ExpressVPN server, their browsing activity was often going directly to their ISP, unmasked. The bug only impacted a few users, and to their credit, ExpressVPN sprang into action as soon as they learned about it. The team had it patched by April, as confirmed by the researcher who initially discovered the vulnerability. But while their quick and effective response deserves praise, it's still a mark against them that a journalist noticed the bug before they did. Kape Technologies ownership and management questions In 2021, an Israeli-owned, UK-based firm called Kape Technologies purchased a controlling interest in ExpressVPN. In addition to ExpressVPN, privately held Kape owns CyberGhost, Private Internet Access, and Zenmate (before it merged into CyberGhost). As shown on its website, it also owns Webselenese, publisher of VPN review websites WizCase and vpnMentor, which poses an apparent conflict of interest. When reached for comment, a representative for ExpressVPN said that "ExpressVPN does not directly engage with, nor seek to influence, the content on any Webselenese site," and pointed us to disclosure statements on the websites in question — here's one example. Even so, it's a good reminder not to take VPN reviews at face value without knowing who's behind them (Engadget is owned by Yahoo, which does not own any VPNs). Diving deeper into the background of Kape's ownership will lead you to owner Teddy Sagi. Go back far enough, and you'll see he did prison time in Israel and was mentioned in the Pandora Papers, among other things. More recently, headlines about the billionaire have focused more his businesses in the online gambling and fintech arenas, as well as his real estate ventures. An ExpressVPN representative told us that "Kape's brands continue to operate independently," and our investigation bore that out — we couldn't find any proof that Kape or Sagi have directly attempted to influence ExpressVPN's software or daily operations. Closer to the immediate day-to-day operations of ExpressVPN was the company's employment of Daniel Gericke as CTO from 2019 through 2023. During that time, the US Justice Department announced it had fined Gericke and two others for their previous employment on a surveillance operation called Project Raven, which the United Arab Emirates (UAE) used to spy on its own citizens. The revelation prompted a public response from ExpressVPN defending its decision to hire Gericke, arguing that "[t]he best goalkeepers are the ones trained by the best strikers." ExpressVPN's representative confirmed that the company still stands by that linked statement. Gericke parted ways with ExpressVPN in October 2023, per his LinkedIn profile. While we don't know what we don't know, we can say that ExpressVPN has not notably changed its public-facing security and privacy policies during the time it's been connected to Kape, Sagi, or Gericke. In the end, how much ExpressVPN's history matters to you is a personal choice. If you object to any current or past actions by Kape Technologies or Teddy Sagi, there are other premium VPN options you might prefer. If you need more information to make up your mind, we recommend reading through CNET's 2022 deep dive on ExpressVPN's corporate history. Final verdict ExpressVPN is the VPN we most often recommend to beginners. It takes zero training to use, and consistently gets past filters on streaming sites. It also runs in the background with virtually no impact. If anything is worth the high price of admission, it's the excellent speeds distributed evenly across the worldwide server network. However, for certain specific cases, ExpressVPN may not be the best choice. There's no way to set up your own server locations, like NordVPN offers, and no double VPN connections, like you can build for yourself on Surfshark. Its corporate background is more suspect than the entities backing Proton VPN, and unlike Mullvad, ExpressVPN doesn't work in China — it's so well-known that the government targets its servers specifically. We suggest going with ExpressVPN for general online privacy, for spoofing locations in your home country while traveling, or if you regularly need to unblock sites in other countries. That encompasses 19 of every 20 users, which is fine by us, as ExpressVPN is a great service. It's just more of a reliable old screwdriver than a multi-tool. This article originally appeared on Engadget at https://www.engadget.com/cybersecurity/vpn/expressvpn-review-2025-fast-speeds-and-a-low-learning-curve-160052884.html?src=rss

Tech layoffs have continued in 2025. Much of that is being blamed on a combination of a slower economy and the adoption of automation via artificial intelligence. Nearly four in 10 Americans, for instance, believe generative AI (genAI) could diminish the number of available jobs as it advances, according to a study released in October by the New York Federal Reserve Bank. And the World Economic Forum’s Jobs Initiative study found that close to half (44%) of worker skills will be disrupted in the next five years — and 40% of tasks will be affected by the use of genAI tools and the large language models (LLMs) that underpin them. In April, the US tech industry lost 214,000 positions as companies shifted toward AI roles and skills-based hiring amid economic uncertainty. Tech sector companies reduced staffing by a net 7,000 positions in April, an analysis of data released by the US Bureau of Labor Statistics (BLS) showed. This year, 137 tech companies have fired 62,114 tech employees, according to Layoffs.fyi. Efforts to reduce headcount at government agencies by the unofficial US Department of Government Efficiency (DOGE) saw an additional 61,296 federal workers fired this year. Kye Mitchell, president of tech workforce staffing firm Experis US, believes the IT employment market is undergoing a fundamental transformation rather than experiencing traditional cyclical layoffs. Although Experis is seeing a 13% month-over-month decline in traditional software developer postings, it doesn’t represent “job destruction, it’s market evolution,” Mitchell said. “What we’re witnessing is the emergence of strategic technology orchestrators who harness AI to drive unprecedented business value,” she said. For example, organizations that once deployed two scrum teams of ten people to develop high-quality software are now achieving superior results with a single team of five AI-empowered developers. “This isn’t about cutting jobs; it’s about elevating roles,” Mitchell said. Specialized roles in particular are surging. Database architect positions are up 2,312%, statistician roles have increased 382%, and jobs for mathematicians have increased 1,272%. “These aren’t replacements; they’re vital for an AI-driven future,” she said. In fact, it’s an IT talent gap, not an employee surplus, that is now challenging organizations — and will continue to do so. With 76% of IT employers already struggling to find skilled tech talent, the market fundamentals favor skilled professionals, according to Mitchell. “The question isn’t whether there will be IT jobs — it’s whether we can develop the right skills fast enough to meet demand,” she said. For federal tech workers, outdated systems and slow procurement make it hard to attract and keep top tech talent. Agencies expect fast team deployment but operate with rigid, outdated processes, according to Justin Vianello, CEO of technology workforce development firm SkillStorm. Long security clearance delays add cost and time, often forcing companies to hire expensive, already-cleared talent. Meanwhile, modern technologists want to use current tools and make an impact — something hard to do with legacy systems and decade-long modernization efforts, he added. Many suggest turning to AI to will solve the tech talent shortage, but there is no evidence that AI will lead to a reduction in demand for tech talent, Vianello said. “On the contrary, companies see that the demand for tech talent has increased as they invest in preparing their workforce to properly use AI tools,” he said. A shortage of qualified talent is a bigger barrier to hiring than AI automation, he said, because organizations struggle to find candidates with the right certifications, skills, and clearances — especially in cloud, cybersecurity, and AI. Tech workers often lack skills in these areas because technology evolves faster than education and training can keep up, Vianello said. And while AI helps automate routine tasks, it can’t replace the strategic roles filled by skilled professionals. Seven out of 10 US organizations are struggling to find skilled workers to fill roles in an ever-evolving digital transformation landscape, and genAI has added to that headache, according to a ManpowerGroup survey released earlier this year. Job postings for AI skills surged 2,000% in 2024, but education and training in this area haven’t kept pace, according to Kelly Stratman, global ecosystem relationships enablement leader at Ernst & Young. “As formal education and training in AI skills still lag, it results in a shortage of AI talent that can effectively manage these technologies and demands,” she said in an earlier interview. “The AI talent shortage is most prominent among highly technical roles like data scientists/analysts, machine learning engineers, and software developers.” Economic uncertainty is creating a cautious hiring environment, but it’s more complex than tariffs alone. Experis data shows employers adopting a “wait and watch” stance as they monitor economic signals, with job openings down 11% year-over-year, according to Mitchell. “However, the bigger story is strategic workforce planning in an era of rapid technological change. Companies are being incredibly precise about where they allocate resources. Not because of economic pressure alone, but because the skills landscape is shifting so rapidly,” Mitchell said. “They’re prioritizing mission-critical roles while restructuring others around AI capabilities.” Top organizations see AI as a strategic shift, not just cost-cutting. Cutting talent now risks weakening core areas like cybersecurity, according to Mitchell. Skillstorm’s Vianello suggests that IT job hunters should begin to upgrade their skills with certifications that matter: AWS, Azure, CISSP, Security+, and AI/ML credentials open doors quickly, he said. “Veterans, in particular, have an edge; they bring leadership, discipline, and security clearances. Apprenticeships and fellowships offer a fast track into full-time roles by giving you experience that actually counts. And don’t overlook the intangibles: soft skills and project leadership are what elevate technologists into impact-makers,” Vianello said. Skills-based hiring has been on the rise for several years, as organizations seek to fill specific needs for big data analytics, programing (such as Rust), and AI prompt engineering. In fact, demand for genAI courses is surging, passing all other tech skills courses spanning fields from data science to cybersecurity, project management, and marketing. “AI isn’t replacing jobs — it’s fundamentally redefining how work gets done. The break point where technology truly displaces a position is when roughly 80% of tasks can be fully automated,” Mitchell said. “We’re nowhere near that threshold for most roles. Instead, we’re seeing AI augment skill sets and make professionals more capable, faster, and able to focus on higher-value work.” Leaders use AI as a strategic enabler — embedding it to enhance, not compete with, human developers, she said. Some industry forecasts predict a 30% productivity boost from AI tools, potentially adding more than $1.5 trillion to global GDP. For example, AI tools are expected to perform the lion’s share of coding. Techniques where humans use AI-augmented coding tools, such as “vibe coding,” are set to revolutionize software development by creating source code, generating tests automatically, and freeing up developer time for innovation instead of debugging code.  With vibe coding, developers use natural language in a conversational way that prompts the AI model to offer contextual ideas and generate code based on the conversation. By 2028, 75% of professional developers will be using vibe coding and other genAI-powered coding tools, up from less than 10% in September 2023, according to Gartner Research. And within three years, 80% of enterprises will have integrated AI-augmented testing tools into their software engineering tool chain — a significant increase from approximately 15% early last year, Gartner said. A report from MIT Technology Review Insights found that 94% of business leaders now use genAI in software development, with 82% applying it in multiple stages — and 26% in four or more. Some industry experts place genAI’s use in creating code much higher. “What we are finding is that we’re three to six months from a world where AI is writing 90% of the code. And then in 12 months, we may be in a world where AI is writing essentially all of the code,” Anthropic CEO Dario Amodei said in a recent report and video interview. “The real [AI] transformation is in role evolution. Developers are becoming strategic technology orchestrators,” Mitchell from Experis said. “Data professionals are becoming business problem solvers. The demand isn’t disappearing; it’s becoming more sophisticated and more valuable. “In today’s economic climate, having the right tech talent with AI-enhanced capabilities isn’t a nice-to-have, it’s your competitive edge,” she said.

Macworld Every year, as Apple’s WWDC approaches, speculation about what new products may arrive alongside all the big software announcements. While sources claim that Apple has been working on a new interface for iOS, macOS, and other operating systems, we haven’t heard much about new hardware coming at WWDC. There are rumors about products in the works—most notably new Macs and the “HomePad” smart home hub—but the reality is, if you’re expecting to see new hardware at WWDC 2025, you’re likely to be disappointed. WWDC is a software event Historically, WWDC is an event focused almost entirely on software. After all, it’s a conference for developers. Every year, Apple not only reveals its plans for the future of its operating systems at the event, but also gives developers early access to new APIs and frameworks. This enables them to start optimizing their apps for the new platforms months ahead of public releases. While there have been occasional hardware announcements, such as the original HomePod, the transition to Apple silicon in 2020, and the first look at the Apple Vision Pro in 2023, those moments were tightly linked to developer needs. This year, rumors suggest that Apple has been working on new hardware products that could be a good fit for WWDC, but it doesn’t look like they’ll be ready in time for this year’s event. Here’s why. HomePad: Delayed In an effort to take HomeKit to the next level, Apple has been working on a smart home hub with a built-in screen for several years. The idea is to let users easily control their HomeKit accessories, such as lamps, heaters, and robot vacuum cleaners, even when their phone isn’t around. While the actual name of the device is unclear, reports claim it will combine aspects of the HomePod and iPad in a single product focused on the smart home, so it’s been dubbed HomePad. Apple is reportedly making a new smart home hub that combines an iPad with a HomePod, but it’s likely not shipping for a while.Foundry Along with the smart home capabilities, HomePad will reportedly also function as an Apple TV-like entertainment device so users can stream video and music, or make FaceTime calls from its built-in camera. Essentially, it will be a home companion device that is either mounted to a wall or sits in a dock. While the HomePad was once expected to launch in the spring, recent reports claim the project is delayed, possibly until 2026. The main reason is due to a deep integration with Apple Intelligence and the new Siri experience, which have been beset with issues. It’s possible that Apple gives a sneak peek of HomePad at WWDC, as it did with HomePod and Vision Pro, but most reports say Apple is focused on fixing Siri first. M5 Macs and iPads: Not yet WWDC has been a hot spot for new Macs in recent years, with Apple Silicon, the redesigned M2 MacBook Air, and the M2 Ultra chip all making their debuts at WWDC. As such, there has been speculation about whether Apple will announce any new Mac hardware at WWDC. With the exception of the Mac Pro, which hasn’t seen any updates since 2022, Apple has already completed the transition of the entire Mac lineup to the M4 chip, introduced last year with the iPad Pro. In theory, this could mean that Apple will move onto the next generation of chips at WWDC, but don’t count on it. Apple typically unveils the first new Macs with the next generation of chips in the fall, around October and November. And according to multiple sources in the industry, this will be the case once again this year. A new iPad Pro with the M5 chip and M5 MacBook Pro are said to be on track for the second half of 2025. It’s possible that Apple unveils a new high-end chip for the aging Mac Pro, but most reports claim that Apple will keep the current model around until the M5 Ultra arrives. Could the M5 debut at WWDC? It’s not likely.Foundry iPhone 17: Coming in September Although in the past Apple has introduced new iPhone models at WWDC, it’s been more than a decade since an iPhone model debuted at the event. Besides, the iPhone 16e only just arrived in March, and the iPhone 17 lineup will arrive in September. One of the main reasons is that the new iPhone always ships with the new version of iOS announced at WWDC, so Apple needs time to test and refine the new software before launching the new phone. So if you’re planning to buy an iPhone 17, you’ll have to wait until September at least. Apple Vision Pro 2: Maybe next year The first Apple Vision Pro is decidedly a developer device. It was announced at WWDC 2023 but didn’t ship until 2024, mainly so developers had time to build new apps for the headset. And with a $3,499 price tag, it’s still basically a developer kit.  The current Vision Pro is powered by the M2 chip, which some consumers may consider outdated for a product that costs $3,500. Although Apple is rumored to be working on an updated Vision Pro with an M5 chip inside, this model is unlikely to arrive before next year. According to a report from The Information, Apple has reportedly set aside the Vision Pro 2 project to work on a more affordable version of its mixed reality headset, but that model isn’t expected to ship for a while either. So while we’ll get a look at the new visionOS software, the same hardware is likely sticking around for at least another year. WWDC will likely be very software-centric this year.Foundry What to expect instead at WWDC 2025? Once again, this WWDC will be all about software and services, so expect major updates across all Apple platforms. From iOS 19 to macOS 16 (or possibly iOS 26 and macOS 26), Apple’s operating systems will be updated with a new, more modern interface. Sources believe that the new design language will be similar to what Apple introduced with visionOS, which has more depth and shadows rather than a completely flat interface. Apple is also rumored to be working on new features to make iPadOS more similar to macOS, as well as further improving Apple Intelligence and the Siri experience. So there will be plenty to get excited about at WWDC 2025, but it almost certainly won’t involve any new devices. WWDC 2025 kicks off on June 9 with an opening keynote. Be sure to follow Macworld’s full coverage of the event.

Air travel is such a common part of modern life that it’s easy to forget all the miraculous technology and communication infrastructure required to do it safely. But recent crashes, including near Washington, DC, and in San Diego — not to mention multiple near misses — have left many fliers wondering: Is it still safe to fly?That concern is particularly acute at Newark Liberty International Airport in New Jersey, which has recently experienced several frightening incidents and near misses in as radio and radar systems have gone dark. This has left an under-staffed and overworked group of air traffic controllers to manage a system moving at a frenetic pace with no room for error.Andrew Tangel, an aviation reporter for the Wall Street Journal, recently spoke to Jonathan Stewart, a Newark air traffic controller. In early May, Stewart experienced a brief loss of the systems showing him the locations of the many planes was directing. When the systems came back online, he realized there’d almost been a major crash.According to Tangel, Stewart “sent off a fiery memo to his managers, complaining about how he was put in that situation, which he felt he was being set up for failure.” Stewart now is taking trauma leave because of the stresses of the job. After many delayed flights, United Airlines just announced that it will move some of its flights to nearby John F. Kennedy International Airport. To understand how we arrived at our current aviation crisis, Today, Explained co-host Sean Rameswaram spoke with Darryl Campbell, an aviation safety writer for The Verge.Below is an excerpt of their conversation, edited for length and clarity. There’s much more in the full episode, so listen to Today, Explained wherever you get your podcasts, including Apple Podcasts, Pandora, and Spotify. You recently wrote about all these issues with flying for The Verge — and your take was that this isn’t just a Newark, New Jersey, problem. It’s systemic. Why?You’ve probably seen some of the news articles about it, and it’s really only in the last couple months because everybody’s been paying attention to aviation safety that people are really saying, Oh my gosh!Newark airport is losing the ability to see airplanes. They’re losing radar for minutes at a time, and that’s not something you want to hear when you have airplanes flying towards each other at 300 miles an hour. So it is rightfully very concerning. But the thing is, what’s been happening at Newark has actually been happening for almost a decade and a half in fits and starts. It’ll get really bad, and then it’ll get better again. Now we’re seeing a combination of air traffic control problems; we’re seeing a combination of infrastructure problems, and they’ve got a runway that’s entirely shut down. And the way that I think about it is, while Newark is its own special case today, all of the problems that it’s facing, other than the runway, are problems that every single airport in the entire country is going to be facing over the next five to 10 years, and so we’re really getting a preview of what’s going to happen if we don’t see some drastic change in the way that the air traffic control system is maintained.We heard about some of these issues after the crash at DCA outside Washington. What exactly is going on with air traffic controllers?The first problem is just one of staff retention and training. On the one hand, the air traffic control system and the people who work there are a pretty dedicated bunch, but it takes a long time to get to the point where you’re actually entrusted with airplanes. It can be up to four years of training from the moment that you decide, Okay, I want to be an air traffic controller. Couple that with the fact that these are government employees and like many other agencies, they haven’t really gotten the cost-of-living increases to keep pace with the actual cost of living, especially in places like the New York and New Jersey area, where it’s just gone up way faster than in the rest of the country.This is bad at Newark, but you say it promises to get bad everywhere else too. The cost of living is still outpacing the replacement level at a lot of these air traffic control centers. And the washout rate is pretty high. We’ve seen the average staffing level at a lot of American airports get down below 85, 80 percent, which is really where the FAA wants it to be, and it’s getting worse over time. At Newark in particular, it’s down to about 58 percent as of the first quarter of this year. This is an emergency level of staffing at a baseline. And then on top of that, you have — in order to keep the airplanes going — people working mandatory overtime, mandatory six-days-a-week shifts, and that’s accelerating that burnout that naturally happens. There’s a lot of compression and a lot of bad things happening independently, but all at the same time in that kind of labor system that’s really making it difficult to both hire and retain qualified air traffic controllers.These sound like very fixable problems, Darryl. Are we trying to fix them? I know former reality TV star and Fox News correspondent — and transportation secretary, in this day and age — Sean Duffy has been out to Newark. He said this: “What we are going to do when we get the money. We have the plan. We actually have to build a brand new state-of-the-art, air traffic control system.”To his credit, they have announced some improvements on it. They’ve announced a lot of new funding for the FAA. They’ve announced an acceleration of hiring, but it’s just a short-term fix. To put it in context, the FAA’s budget usually allocates about $1.7 billion in maintenance fees every year. And so they’ve announced a couple billion more dollars, but their backlog already is $5.2 billion in maintenance. And these are things like replacing outdated systems, replacing buildings that are housing some of these radars, things that you really need to just get the system to where it should be operating today, let alone get ahead of the maintenance things that are going to happen over the next couple of years. It’s really this fight between the FAA and Congress to say, We’re going to do a lot today to fix these problems.And it works for a little while, but then three years down the road, the same problems are still occurring. You got that one-time shot of new money, but then the government cuts back again and again and again. And then you’re just putting out one fire, but not addressing the root cause of why there’s all this dry powder everywhere.People are canceling their flights into or out of Newark, but there are also all these smaller accidents we’re seeing, most recently in San Diego, where six people were killed when a Cessna crashed.How should people be feeling about that?There’s really no silver bullet and all the choices are not great to actively bad at baseline. Number one is you get the government to pay what it actually costs to run the air traffic control system. That empirically has not happened for decades, so I don’t know that we’re going to get to do it, especially under this administration, which is focused on cutting costs.The second thing is to pass on fees to fliers themselves. And it’s just like the conversation that Walmart’s having with tariffs — they don’t want to do it. When they try to pass it on to the customer, President Trump yells at them, and it’s just not a great situation. The third option is to reduce the number of flights in the sky. Part of this is that airlines are competing to have the most flights, the most convenient schedules, the most options. That’s led to this logjam at places like Newark, where you really have these constraints on it. Right before all of this stuff happens, Newark was serving about 80 airplanes an hour, so 80 landings and takeoffs. Today, the FAA’s actually started to admit restrictions on it, and now it’s closer to 56 flights an hour, and that’s probably the level that it can actually handle and not have these issues where you have planes in danger.But no airline wants to hear, Hey, you have to cut your flight schedule. We saw that with United: Their CEO was saying that the air traffic controllers who took trauma leave had “walked off the job,” which seemed to suggest that he didn’t think they should be taking trauma leave because you have to have more planes coming in. That’s a competitive disadvantage for him, but you also have to balance safety. It’s difficult to understand. It costs a lot of money to fix. This is your textbook “why governments fail” case study and it’s not really reassuring that in 24 hours I’m going to be in the middle of it again, trying to fly out of Newark.See More:

How far would you go to keep yourself private online? There’s little doubt that advances in technology over the past three decades have eroded traditional concepts around privacy and security: It was once unthinkable to voluntarily invite big companies to track your every move and decision—now, we happily let them in exchange for the digital goods and services we rely on (or are hopelessly addicted to). Most people these days either tolerate these privacy intrusions or outright don’t care about them. But there’s a growing movement that believes it’s time to claim our privacy back. Some are working piecemeal, blocking trackers and reducing permissions where they can, while not totally ditching modern digital society as a whole. Others, however, are as hardcore as can be—a modern equivalent of "going off the grid."  We put out a call looking for the latter—people who are going to great lengths to protect their privacy in today’s mass surveillance world. We received a number of insightful, fascinating, and unique situations, but for this piece, I want to highlight four specific perspectives: "Ed," "Jane," "Mark," and "Jay."Ed is "ruthless" with app choices and permissionsThe first respondent, I’ll call Ed, since their privacy journey began with the Edward Snowden leaks: “I'd known something was likely up…as early as 2006[.] I remember headlines about AT&T possibly spying, but high school me didn't take it too seriously at the time. The Snowden leaks, when I was in college, really opened my eyes. Ever since, I've taken steps to protect my privacy.”Ed says the biggest step they’ve taken towards a digitally private life has been their Proton account. If you’re not aware, Proton is a company that offers apps designed for privacy. Their email service, Proton Mail, is the most famous of the company’s products, but Proton makes other apps as well. Ed uses many of them, including Proton VPN, Proton Calendar, and Proton Drive. Ed pays for Proton Ultimate, which costs them nearly $200 every two years (a new account is now billed yearly at $119.88). You don’t have to pay for Proton, but your experience is much more limited. That’s not totally dissimilar to Google’s offers, which gives you more features if you pay, but most people can definitely get by with a free Google Account. I'm not so sure the reverse is true. Speaking of Google, Ed does have a Google Account, but rarely logs into it. They don’t keep anything attached to it, however—Ed stores all files, for example, in Proton Drive or Tresoirt (another end-to-end encrypted service).Ed uses SimpleLogin for throwaway email addresses. That’s not just for the times Ed wants to avoid giving their email address to someone. According to them, they use an alias anytime an organization asks for their email, and frequently delete it when it’s no longer useful. Each online purchase gets its own alias, and that alias is deleted once the purchase is complete. Whenever Ed travels, they use an alias for any flights, hotels, and rental cars they use. Once the trip is up, they delete the alias. If one of those aliases receives a spam message, they delete it as well.Ed’s smartphone of choice is iPhone, and although Apple arguably has the best reputation for privacy in big tech, Ed is no fan: “Apple is no bastion of privacy of course, but they seem to be the least-worst of the big tech companies.” Ed doesn’t use iCloud for any backups: Any iPhone files are kept in Tresorit. That iPhone, of course, contains apps. But each app is there for a reason, and no app gets access to permissions unless it requires it: “I'm ruthless about apps and app permissions. If I'm not going to use the app regularly, I uninstall it. I grant only those permissions I think the app reasonably needs.” Ed protects his mobile internet traffic with Proton VPN, and only accesses the web via Firefox Focus, a special version of Firefox designed for privacy. Location services are always off on Ed’s iPhone, unless they’re using Apple Maps for navigation. Once they arrive at their destination, Ed disables location services again. They also have an interesting trick for getting back home without revealing their actual address:  “Additionally, when I'm navigating home, I don't enter my home address. I enter the address down the street just as an extra layer so I'm not entering my actual home address…I'll end navigation and turn off location while still driving…if I know the rest of the way home myself."Most of us deal regularly (if not daily) with spam calls. Not Ed: They use the “Silence Unknown Callers” setting on iOS to send all numbers not in the Contacts app to voicemail. They then review all voicemails, and if they didn’t leave a message, they block the number. Our initial call out for this piece referenced how using a VPN can sometimes block incoming phone calls, but Ed isn’t bothered by that: “Since most calls these days are scams or telemarketing, and most people I do want to talk to aren't going to call me anyway, I see this as more of a feature than a bug.” For their desktop computing needs, Ed uses Windows. They admit they aren’t privacy experts when it comes to Microsoft’s OS, but they do what they can, including changing all privacy settings and uninstalling all programs they don’t use. (That includes OneDrive and Edge.) They also run a clean version of Windows 11 after following Lifehacker’s guide. Firefox is their go-to PC browser, and they use a variety of extensions, including:ClearURLs: removes trackers from links.Decentraleyes: blocks data requests from third-party networks. Disconnect: blocks trackers from "thousands" of third-party sites.Firefox Multi-Account Containers: separates your browsing into siloed "containers" to isolate each session from one another.PopUpOFF: blocks pop-ups, overlays, and cookie alerts.Privacy Badger: blocks invisible trackers.Proton VPN: Proton's Firefox add-on for its VPN.uBlock Origin: popular content blocker.Ed didn’t say how much of an impact this array of extensions and settings has on their browsing, save for YouTube, which they admit does sometimes give them trouble. However, Ed has workarounds: “When YouTube wants me to 'sign in to confirm you're not a bot,' changing VPN servers usually does the trick.” Ed also uses the audible clues for ReCAPTCHA prompts, rather than the pictures, since they don’t want to help train Google’s “braindead AI.”Ed deleted all their social media accounts, including Facebook, X, Instagram, and LinkedIn. Though they’ve never had TikTok installed on their phone, they will watch it in Firefox when a friend sends them a video. Jane uses an open-source smartphone OS designed for privacyWhile Edward Snowden may have kicked off Ed’s interest in personal privacy, "Jane" has many strong beliefs motivating their desire for privacy. They are concerned about data brokers and Meta’s practices of tracking internet activity, and how these companies build profiles based on that data to sell to third-parties; they’re concerned about the possibility of telecommunication companies tracking our locations via cellular towers; they worry about US law enforcement and agencies reviewing citizens’ social media accounts accounts and tracking people. Their focus on privacy is fueled by true concern for their own well-being, not only the value of privacy as a concept.      Jane uses a VPN on all of their devices. Instead of Proton, however, Jane opts for Mullvad. They enable ad and tracker blocking, as well as a kill switch, which blocks your internet if you lose connection with the VPN—thus protecting your connection from being leaked out of the secure network.I’m a big advocate for strong and unique passwords and proper password management, but Jane definitely beats me when it comes to secure credentials. Jane uses six to eight-word passphrases generated by diceware, a tactic that chooses words based on dice rolls. Something like this diceware generator will roll a die five times, then find a word in a bank based on that five-digit number. You can repeat this as many times as you want to come up with a passphrase built up with random words. Jane saves all of their passphrases to a password manager, except for the ones for important accounts, like their bank. They commit those to memory, just in case someone breaches their password manager.     Like Ed, Jane uses Mullvad, but instead of just using their VPN, they opt for the web browser, which has those protections built in. Mullvad’s strict privacy settings break persistent logins on websites, so any sites Jane wants to stay logged in on are kept in Brave browser. For both Mullvad and Brave, Jane uses uBlock Origin.“From time-to-time I do run into sites that will block access due to being on a VPN or blocking ads and trackers. Instead of disabling [my] VPN completely, switching my connection to one of Mullvad's rented servers instead of ones they own usually helps. Barring that, I occasionally go into [uBlock Origin] and temporarily whitelist a needed [URL] ([ReCAPTCHA] etc). This works for me to get around site blocks most of the time.”  Jane uses a Mac, and configured macOS based on various privacy guides. But instead of an iPhone, Jane opts for a Google Pixel. That might surprise readers who assumed hardcore privacy enthusiasts would break away from Google entirely. But X doesn’t run Android: Instead, they installed GrapheneOS on their Pixel, an open-source OS designed for privacy. Following a restart, Jane configured the Pixel to only unlock with a seven-word dice passphrase—for general use, they use a fingerprint scan and a six-digit PIN. If the don’t unlock their Pixel for a while, their phone automatically reboots to put it back into this “First Unlock” state. They also keep airplane mode on at all times to disable the phone’s radio communications, but maintain a wifi connection with timed automatic Bluetooth and wireless disabling. Jane also deleted all their social media accounts after downloading all data associated with those platforms.Mark uses phone and credit card masks“Mark” is perhaps the least hardcore of the respondents in this story, but that makes their experience both interesting and relatable. Unlike most of the people we spoke to, Mark is still on Facebook and Instagram. That’s due to their job, which requires them to be on the platform, but they’ve been “systematically” deleting everything they can over their 19-year Facebook history and saving the data to an external hard drive. Mark doesn’t follow anything that isn’t relevant to their job, and only uses Facebook and Instagram inside the DuckDuckGo browser. They don’t react to posts they see, and following their privacy tactics, Facebook doesn’t show them relevant ads anymore. “If there is an ad I'm actually interested in I'll search it up in a different browser rather than click it.”Mark has had four Google Accounts in their time online, and has deleted two so far. Like Facebook, they have to use Google for their job, but they delegate all their work to Chrome. All other browsing runs through Firefox, DuckDuckGo, or Tor. The latter is perhaps best known for being the browser of choice for browsing the dark web, but what makes it great for that is also what makes it a great choice for private browsing.Unlike others in this story, Mark hasn’t de-Googled themselves completely. In addition to using Chrome for work, Mark has a phone mask through Google, and has their contacts, calendar, and maps tied to the company—though they are moving away from Google as much as they can. They've been running through their old emails to find and delete outdated accounts they no longer use. Any accounts they do need now use an email mask that forwards to a Mailfence account, an encrypted email service.   Mark was the only respondent to talk about entertainment in relation to privacy: “I've also been switching to physical media over streaming, so buying CDs and DVDs, locally as much as possible. I'm lucky to have a local music store and a local bookstore...one of the owners of our bookstore wrote a book on how to resist Amazon and why. Any book I want, I can either order through them or on Alibris. For music, I use our local record store and Discogs.”When shopping online, Mark uses a credit card mask, but still uses the card itself when shopping in person. They want to start using a credit card mask in retail locations like Janet Vertesi, an associate professor of sociology at Princeton University, but they haven’t quite gotten there yet.   What really piqued my interest most about Mark, however, wasn’t their perspective on their own privacy concerns, but the concerns around the privacy of their kids: “They each have a Gmail, two of them have Snapchat. Their schools use Gaggle and Google to spy on them. I don't even know how to start disconnecting them from all this...I was a kid during the wild west of the internet and this feels like getting back to my roots. My kids are end users who understand apps and touchscreens, not torrenting their music or coding a basic website. (Is this my version of "I drank out of the garden hose"?) I feel like Big Data has its grip on the kids already and I don't have a guidebook on navigating that as a parent.”  Mark’s current focus on their kids’ privacy includes deleting their health data from their local health system. That’s in part due to a data breach impacting the health system, but also the language about autism from Robert F. Kennedy Jr., the current Secretary of Health and Human Services.Jay de-googled their life and uses a VoIP phone number"Jay's" origin story with personal privacy dates back to 2017. That year, Equifax suffered a major hack, where nearly 148 million Americans had sensitive data stolen and weren’t notified about the breach for months. Jay was frustrated: You don’t choose to give your data to Equifax, or any credit bureau, and yet so many people lost their data. They also felt that companies were not properly held responsible for these events, and lawmakers were simply too out of touch to do what was necessary to protect citizens’ privacy, so they took it upon themselves to protect their own data. Ever since this incident, Jay freezes their credit: “It was frustratingly difficult back then, but nowadays, it is very easy (it just requires an account, which I use a burner email for)...The freeze will not allow anyone to pull credit for large purchases in your name, even if they have your social security number (and because of the data breach, someone probably does). I decided I wanted to pursue some privacy for the things I do have a choice over.”  From here, Jay de-googled their life, including both Google Search as well as YouTube. They’ve found no issue with using alternative search engines, and, in fact, sees Google getting worse, as it tries to show you results based on what it thinks it knows about you, not what is most relevant to your actual query: “The internet was supposed to be a place you went to find information, not where you became the information that companies take instead."Jay uses tools to prevent fingerprinting, where companies identify you and track you across the internet, but worries that going too far with things like ad blockers puts a target on your back as well. Jay chooses to pick “a couple of effective tools,” and runs with those.For their smartphone needs, Jay goes with Apple. Like Ed, Jay doesn’t believe Apple is perfect, and even considers their privacy policies a bit of a gimmick, but sees them as the better alternative to Android. Jay likes the security of the App Store, and the array of privacy features in both Safari and Apple Accounts as a whole. They highlight Safari’s “Advanced Tracking and Fingerprinting Protection” feature, which helps block trackers as you browse the web; iCloud’s Private Relay, which hides your IP address; and “Hide My Email,” which generates email aliases you can share with others without giving your true email address away.Most of us are plagued with spam calls, but following the Robinhood data breach in 2021, Jay started receiving a flood of them. They decided to change their phone number and made a point of never sharing it with businesses. For the times they need to give out their number to parties they don’t trust, they use a number generated by My Sudo, which, for $20 per year, gives them a VoIP (Voice over Internet Protocol) phone number. It works with most services that rely on SMS, but it won’t function for two-factor authentication. (Which is fine, seeing as SMS-based 2FA is the weakest form of secondary authentication.) My Sudo lets you change your number for an additional $1, so if Jay’s number ever was compromised or started receiving too much spam, they could swap it.        Jay, like many respondents, deleted all social media services: “It has its place in society for a lot of people, and is no doubt a great way to connect. However, I found that the fear of deleting it was a lot worse than actually deleting it. The people you care about won’t forget you exist.” That said, Jay doesn't mind any of the obstacles this lifestyle does throw their way: “It is a challenging topic, as most people consider you a little bit 'out there' if you take steps to make your life a little less convenient, but more private. The modern world sells you convenience, while pretending it is free, and harvesting your data for so much more than you actually get out of your relationship to them.”      What it takes to be private on the modern internetThere's no one way to tackle personal privacy. Every one of the respondents to our query had something unique about their approach, and many had different motivations behind why they were so concerned about their privacy.There are plenty of common through lines, of course. Most privacy people love Proton, which makes sense. Proton seems to be the only company that offers a suite of apps most closely resembling Google's while also prioritizing privacy. If you want your email, calendar, word processor, and even your VPN all tied up nicely under one privacy-focused umbrella, that's Proton. But not everyone wants an ecosystem, either. That's why you see respondents using other VPNs, like Mullvad, or other private storage options, like Tresorit. These apps and services exist—they might just not be owned by one company, like Apple or Google (or Proton).Google and Meta are more commonalities, in that most privacy enthusiasts ditch them entirely. Some, like Mark, haven't been able to fully shake off these data-hungry companies. In Mark's case, that's because they need these platforms for work. But while most hardcore privacy people delete their Google and Meta accounts, most of us have trouble de-Googling and de-Metaing our digital lives. In general, though, the keys to privacy success include the following: Use a VPN to protect your internet traffic; prioritize privacy in your web browser, both through the browser itself, as well as extensions that block ads and protect your traffic; shield your sensitive information whenever possible, by using email aliases, alternate phone numbers, or credit card masks; use strong and unique passwords for all accounts, and store those passwords in a secure password manager; use two-factor authentication whenever possible (perhaps passkeys, when available); and stick to end-to-end encrypted chat apps to communicate with others. While there's always more you can do, that's the perfect storm to keep your digital life as private as reasonably possible. Some might read through the examples here and see steps that are too much effort to be worth it. It might seem out of reach to ditch Gmail and Instagram, break certain websites, and force your friends and family to learn new numbers and email addresses to protect your privacy, especially if you don't feel your privacy has that much of an impact on your life. But even if you aren't sold on the concept of privacy itself, there are real-world results from sticking with these methods. Jay no longer receives spam calls and texts; Mark no longer sees ads that are freakishly relevant to their likes. It's a lifestyle change, to be sure, but it's not just to serve some concept of privacy. You can see results by changing the way you interact with the internet, all without having to actually disconnect from the internet, and, by extension, the world at large.

Published June 1, 2025 10:00am EDT close Microsoft claims a big leap forward in forecasting Just in time for hurricane season, Microsoft is unveiling a new AI-powered weather prediction system. Infostealer malware has been on the rise recently, and that's evident from the billions of user records leaked online in the past year alone. This type of malware targets everything from your name, phone number and address to financial details and cryptocurrency. Leading the charge is the Lumma infostealer.I have been reporting on this malware since last year, and security researchers have called it one of the most dangerous infostealers, infecting millions. There have been countless incidents of Lumma targeting people's personal data (more on this later), but the good news is that Microsoft has taken it down.The Redmond-based company announced it has dismantled the Lumma Stealer malware operation with the help of law enforcement agencies around the world. Illustration of a hacker at work   (Kurt "CyberGuy" Knutsson)What you need to knowMicrosoft confirmed that it has successfully taken down the Lumma Stealer malware network in collaboration with law enforcement agencies around the world. In a blog post, the company revealed that its Digital Crimes Unit had tracked infections on more than 394,000 Windows devices globally between March 16 and May 16.Lumma was a go-to tool for cybercriminals, often used to siphon sensitive information like login credentials, credit card numbers, bank account details and cryptocurrency wallet data. The malware’s reach and impact made it a favored choice among threat actors for financial theft and data breaches.MASSIVE DATA BREACH EXPOSES 184 MILLION PASSWORDS AND LOGINSTo disrupt the malware’s operation, Microsoft obtained a court order from the U.S. District Court for the Northern District of Georgia, which allowed the company to take down key domains that supported Lumma’s infrastructure. This was followed by the U.S. Department of Justice stepping in to seize control of Lumma’s core command system and shut down marketplaces where the malware was being sold.International cooperation played a major role as well. Japan’s cybercrime unit helped dismantle Lumma’s locally hosted infrastructure, while Europol assisted in actions against hundreds of domains used in the operation. In total, over 1,300 domains were seized or redirected to Microsoft-managed sinkholes to prevent further damage.Microsoft says this takedown effort also included support from industry partners such as Cloudflare, Bitsight and Lumen, which helped dismantle the broader ecosystem that enabled Lumma to thrive. HP laptop   (Kurt "CyberGuy" Knutsson)More about the Lumma infostealerLumma is a Malware-as-a-Service (MaaS) that has been marketed and sold through underground forums since at least 2022. Over the years, its developers have released multiple versions to continually improve its capabilities. I first reported on Lumma in February 2024, when it was used by hackers to access Google accounts using expired cookies that contained login information.Lumma continued targeting users, with reports in October 2024 revealing it was impersonating fake human verification pages to trick Windows users into sharing sensitive information. The malware wasn’t limited to Windows. In January 2024, security researchers found the infostealer malware was targeting 100 million Mac users, stealing browser credentials, cryptocurrency wallets and other personal data. Windows laptop   (Kurt "CyberGuy" Knutsson)6 ways you can protect yourself from infostealer malwareTo protect yourself from the evolving threat of infostealer malware, which continues to target users through sophisticated social engineering tactics, consider taking these six essential security measures:1. Be skeptical of CAPTCHA prompts: Legitimate CAPTCHA tests never require you to press Windows + R, copy commands or paste anything into PowerShell. If a website instructs you to do this, it’s likely a scam. Close the page immediately and avoid interacting with it.2. Don’t click links from unverified emails and use strong antivirus software: Many infostealer attacks start with phishing emails that impersonate trusted services. Always verify the sender before clicking on links. If an email seems urgent or unexpected, go directly to the company’s official website instead of clicking any links inside the email.The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices.3. Enable two-factor authentication: Enable two-factor authentication (2FA) whenever possible. This adds an extra layer of security by requiring a second form of verification, such as a code sent to your phone, in addition to your password.4. Keep devices updated: Regularly updating your operating system, browser and security software ensures you have the latest patches against known vulnerabilities. Cybercriminals exploit outdated systems, so enabling automatic updates is a simple but effective way to stay protected.WHAT IS ARTIFICIAL INTELLIGENCE (AI)?5. Monitor your accounts for suspicious activity and change your passwords: If you’ve interacted with a suspicious website, phishing email or fake login page, check your online accounts for any unusual activity. Look for unexpected login attempts, unauthorized password resets or financial transactions that you don’t recognize. If anything seems off, change your passwords immediately and report the activity to the relevant service provider. Also, consider using a password manager to generate and store complex passwords. Get more details about my best expert-reviewed Password Managers of 2025 here.6. Invest in a personal data removal service: Consider using a service that monitors your personal information and alerts you to potential breaches or unauthorized use of your data. These services can provide early warning signs of identity theft or other malicious activities resulting from infostealer malware or similar attacks. While no service promises to remove all your data from the internet, having a removal service is great if you want to constantly monitor and automate the process of removing your information from hundreds of sites continuously over a longer period of time. ​Check out my top picks for data removal services here. Get a free scan to find out if your personal information is already out on the web.Kurt’s key takeawayMicrosoft’s takedown of the Lumma Stealer malware network is a major win in the fight against infostealers, which have fueled a surge in data breaches over the past year. Lumma had become a go-to tool for cybercriminals, targeting everything from browser credentials to crypto wallets across Windows and Mac systems. I’ve been tracking this malware since early 2024, and its ability to impersonate human verification pages and abuse expired cookies made it especially dangerous.CLICK HERE TO GET THE FOX NEWS APPDo you feel tech companies are doing enough to protect users from malware like this? Let us know by writing us atCyberguy.com/ContactFor more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/NewsletterAsk Kurt a question or let us know what stories you'd like us to coverFollow Kurt on his social channelsAnswers to the most asked CyberGuy questions:New from Kurt:Copyright 2025 CyberGuy.com.  All rights reserved.   Kurt "CyberGuy" Knutsson is an award-winning tech journalist who has a deep love of technology, gear and gadgets that make life better with his contributions for Fox News & FOX Business beginning mornings on "FOX & Friends." Got a tech question? Get Kurt’s free CyberGuy Newsletter, share your voice, a story idea or comment at CyberGuy.com.

Outlets 8, Conghua | © Wu Siming In the landscape of contemporary Chinese urbanism, few typologies encapsulate the contradictions of late-capitalist development more vividly than the pseudo-European commercial complex. These replicated enclaves, constructed en masse in the early 2000s, were once marketed as symbols of international sophistication. Over time, however, many were abandoned, becoming architectural vestiges of speculative urbanism. Outlets 8 in Conghua, Guangzhou, is one such project that has undergone a radical architectural reinterpretation. Originally completed in 2018 but long dormant, it has been reimagined by E Plus Design in collaboration with URBANUS/LXD Studio. Through a precise, light-touch intervention, the project avoids wholesale demolition and reprograms space through color, rhythm, and landscape strategy. Outlets 8, Conghua Technical Information Architects1-14: E Plus Design Central Plaza Design: URBANUS / LXD Studio Location: Conghua District, Guangzhou, China Gross Area: 80,882 m2 | 870,000 Sq. Ft. Project Years: 2022 – 2023 Photographs: © Wu Siming This approach is like a contemporary remix of classical music. The four blocks correspond to four movements. Without extensive demolition or altering the European-style architectural rhythm, we reinterpreted the emotional tones, chords, and cadenzas. Through a blend of color and modern gestures, the outdated and disproportionate ‘faux-antique’ complex has been reorchestrated into a contemporary architectural symphony. – Li Fu, Chief Architect at E Plus Design Outlets 8, Conghua Photographs Aerial View | © Wu Siming © Wu Siming © Wu Siming © Wu Siming © Wu Siming © Wu Siming © Wu Siming © Chen Liang Liu Shan © Chen Liang Liu Shan © Chen Liang Liu Shan Outlets 8 Context and Typological Challenge Outlets 8 was initially conceived as a 110,000-square-meter faux-European outlet village. Despite its scale and investment, it struggled to resonate with local cultural dynamics and remained idle. The typology itself, rooted in nostalgic mimicry, was already facing obsolescence. The challenge, then, was not only architectural but also conceptual: how to resuscitate a typology that had become both spatially and culturally inert. The design team chose a strategy of minimal physical intervention coupled with maximal perceptual impact. Rather than demolish or drastically reconstruct, they aimed to re-signify the existing structures. This approach reflects a growing trend in urban renewal across China, where sustainability, cost-efficiency, and cultural specificity take precedence over spectacle. Spatial Transformation Through Chromatic Reprogramming After | © Wu Siming Before | Original Facade, © E+ At the intervention’s core is using color as a spatial and psychological agent. The ornament-heavy facades were stripped of their polychromatic excess and repainted in low-saturation hues. This chromatic cleansing revealed the formal rhythms of the architecture beneath. By doing so, the design avoids mimicry and opts for abstraction, reintroducing clarity to the site’s visual language. The design framework is structured as a musical metaphor, with each of the four blocks conceived as a separate movement in a visual symphony. The street-facing facades, now unified through a golden “variation,” establish a new urban frontage that is both legible and symbolically rich. A ribbon-like golden band traces across the main elevations, creating continuity and contrast between old and new volumes. In contrast, the sports block adopts a cooler, blue-toned palette, offering a different spatial and functional rhythm. New architectural insertions are rendered in transparent materials, signaling temporal and programmatic distinctions. At the center, the elliptical plaza becomes a spatial crescendo, defined by a sculptural intervention inspired by Roman aqueducts. This feature functions as a landmark and a temporal break, juxtaposing historical references with performative landscape elements. Rewriting Landscape as Urban Ecology After | © Wu Siming Before | Original Facade, © E+ Water, derived from the nearby Liuxi River, serves as the thematic and material backbone of the landscape design. Its integration is not symbolic but functional. Water flows through constructed channels, interactive fountains, and sculptural cascades that encourage observation and participation. These elements create a multisensory environment that enhances the spatial experience while reinforcing ecological awareness. The planting strategy emphasizes native species capable of withstanding Guangzhou’s subtropical climate. The design maximizes greenery wherever regulatory conditions allow, particularly along the main entrance, central corridors, and arcaded walkways. The result is a layered landscape that balances visual density with ecological resilience. Integrating landscape and architecture as a singular design operation, the project shifts away from ornamental greening toward environmental synthesis. This approach foregrounds interaction and immersion, aligning with broader shifts in landscape architecture toward performative and participatory ecologies. Programmatic Rebirth and Urban Implications After | © Wu Siming Before | Original Facade, © E+ Beyond formal and material considerations, the project redefines the programmatic potential of large-scale retail environments. Positioned as a “micro-vacation” destination, Outlets 8 is a hybrid typology. It combines retail, leisure, and outdoor experience within a cohesive spatial narrative. This reprogramming responds to changing patterns of consumption and leisure in Chinese cities, particularly among younger demographics seeking experiential value over transactional efficiency. Statistical metrics underscore the project’s social impact. In its first nine days, the outlet attracted over half a million visitors and became a trending location across multiple digital platforms. While not the focus of architectural critique, these figures reflect a successful alignment between spatial renewal and public resonance. More importantly, the project offers a replicable model for dealing with the vast inventory of misaligned commercial developments across China. The intervention avoids nostalgia and cynicism by foregrounding perceptual clarity, ecological integration, and cultural recontextualization. Instead, it offers a clear path forward for reimagining the built remnants of a prior urban paradigm. Outlets 8, Conghua Plans Elevations | © E Plus Design Floor Plan | © E Plus Design Floor Plan | © E Plus Design Floor Plan | © E Plus Design Floor Plan | © E Plus Design Sections | © E Plus Design Outlets 8, Conghua Image Gallery About E Plus Design E Plus Design is a multidisciplinary architecture studio based in Shenzhen, China, known for its innovative approaches to urban renewal, adaptive reuse, and large-scale public space transformations. The firm emphasizes minimal intervention strategies, spatial clarity, and contextual sensitivity, often working at the intersection of architecture, landscape, and urban design to create integrated environments that are both socially responsive and experientially rich. Credits and Additional Notes Chief Design Consultant: Liu Xiaodu Master Plan, Architecture, and Landscape Schemes: E Plus Design Lead Architects: Li Fu, Coco Zhou Project Managers (Architecture): Guo Sibo, Huang Haifeng Architectural Design Team: Wang Junli, Zhang Yan, Cai Yidie, Zhu Meng, Lin Zhaomei, Li Geng, Stephane Anil Mamode, Liu Shan, Zhou Yubo Central Plaza Design: URBANUS / LXD Studio Architect of Central Plaza: Liu Xiaodu Project Manager: Li An’hong Facade Design: Song Baolin, Li Minggang Lighting Design (Concept): Fang Yuhui Lighting Consultant: Han Du Associates Client: Guangzhou Outlets 8 Commercial Management Co., Ltd. Client Design Management Team: Yin Mingyue, Zhao Xiong Landscape Area: 29,100 m² Chief Landscape Architect: Gao Yan Project Manager (Landscape): Zhang Yufeng Landscape Design Team: Yu Xiaolei, Li Zhaozhan, Liu Chenghua Landscape Construction Drawings: E Plus Design Project Manager: Wang Bin Design Team: Wang Bin (Landscape Architecture). Huang Jinxiong (Greening Design). Li Gen (Water & Electricity Design) Structural Design Team: Wang Kaiming, Yang Helin, Wu Xingwei, Zhuang Dengfa Electrical Design Team: Sun Wei, Yang Ying Interior Design Concept Design: Shenzhen Juanshi Design Co., Ltd. Chief Interior Designer: Feng Feifan Project Manager: Liu Hongwei Design Team: Niu Jingxian, Shi Meitao Construction Drawings: Shenzhen Shiye Design Co., Ltd. Project Manager: Shen Kaizhen Design Team: Yao Yijian, Yang Hao, Liu Chen Wayfinding Design Studio: Hexi Brand Design Co., Ltd. Curtain Wall Design Firm: Positive Attitude Group (PAG)