The Galaxy S24 may see better battery tech, but there’s a catch

andreasc
-
0
The Galaxy S24 may see better battery tech, but there’s a catch
[ad_1]

We’re now following rumors about the next Galaxy S phones. While these phones are more than half a year away, get ready for bits and pieces of news to pop up over time. Case and point, a report points to the Galaxy S24 phones using stacked battery technology. It could also bring another notable improvement we’ve all been waiting for.

For a few years, we’ve been hearing about stacked battery technology. This new way of manufacturing batteries will bring some notable benefits. For example, this will allow batteries to be more densely packed. Batteries will be able to store more power without needing to be physically larger. There are other benefits like better charging, etc.

The Galaxy S24 phone could use this stacked battery technology… well, not all of them

This stacked battery technology is still in the works, so we’re not 100% sure if the company will implement it. However, Samsung is gunning for it to happen, according to RGcloudS (via SamMobile).

If the Korean tech giant is able to make it happen, it predicts that it won’t be able to distribute these new batteries across the entire S24 series. It looks like this privilege will be reserved for the Galaxy S24 Ultra. That’s a bummer for people planning on picking up one of the cheaper phones.

Other reports state that the production is set to take place at the Cheonan plant located in Seoul. There are conflicting reports stating that the production hasn’t begun yet, as the proper manufacturing equipment hasn’t arrived at the plant yet.

There’s another improvement rumored

While this stacked battery technology could make the battery last longer, Samsung could be planning on having the battery charge faster. Rumors say that Samsung will bring faster 65W charging to its next Ultra flagship.

The Galaxy S-series phones are capped at 45W charging. That’s a safe charging speed, but people have been craving faster charging. While 65W is behind some of the competition, this is still a welcomed boost.


[ad_2]
Source link

Top Reasons Why Shopping Online Is Taking the Lead

andreasc
-
0
Top Reasons Why Shopping Online Is Taking the Lead
[ad_1]

Adored by some but disliked by others, shopping is a part of our everyday lives we simply can’t avoid no matter which of the two categories you may fall into. Luckily, with the birth of modern technology, we can nowadays avoid the tedious activity of going shopping and we simply take care of it from the comfort of our own homes by using the internet, various shopping apps and delivery services.

What’s more, when shopping online, you can easily find numerous special deals and promotions, as well as discounts like the ones offered here. That said, let’s explore the top reasons why online shopping has become so popular.

It is more convenient

Simply put, online shopping is more convenient than shopping in person. For starters, you can shop online whenever and wherever you may be. There’s no need to plan out your routes and prepare for the trip; Instead, you can simply reach for your Android or iPhone and get to it.

What’s more, the majority of online stores nowadays offer the option to save a list of the items you purchase frequently, so that you don’t have to go looking for them every time you wish to make a purchase.

It offers more options

Next, shopping online simply offers more options than in-person shopping. Be it the variety of items you can find, delivery options or even discounts, promotions and coupons, you’ll have plenty of options to choose from. For instance, Bravodeal.com is a coupon site specializing in discount codes for users who want to save money on online purchases. Founded in 2018, it offers a wide selection of coupon codes, deals and promos that can be used across major online retailers.

So, when shopping online, make sure you check all of the available options and deals until you find the one that’s perfect for you.

You can shop wherever you are

As mentioned previously, being able to shop online means that you don’t need to set virtually any time aside specifically for this activity. Instead, you can do it at home, on your morning or afternoon commute, while walking your dog, or even before heading to bed.

Being able to make a purchase the moment you see or remember that you’re running low on a particular household item, for instance, will greatly reduce the stress of trying to remember if you’ve forgotten to grab something you need while at the grocery store.

What’s more, if your friend or colleague has, let’s say, a really cool shirt, you can simply ask them where they’ve bought it from and instantly look up – and purchase – the item, provided that it’s still available for sale.

It’s great for the introverts

Another reason people prefer to shop online is the people factor. Simply put, some people hate shopping precisely due to the fact that they will need to interact with other people while doing so.

Therefore, instead of having to deal with store clerks or, God forbid, make small talk with other shoppers while waiting in the line at the registry, you can simply avoid all of that and still get your items with only a few taps of your finger or clicks of a button.

There are some downsides, however

While there’s really no debate whether or not online shopping is great, it’s still important to shine some light on some drawbacks that come with it.

The first one being, obviously, the inability to touch, feel and try out the products you’re interested in prior to purchasing them. And while product photos and videos can tell you a lot about the item, they can’t really be enough to determine that you’ll end up liking the item, or that it will end up suiting you entirely. This is mostly the case with clothes, shoes, makeup and hygiene products.

Another potential drawback of online shopping is precisely the fact that it is so convenient. Which means some people can easily fall into a trap of buying the items they don’t really want – or need – just because they can do it so easily. Needless to say, this could potentially lead to some more serious issues, such as overconsumption or even debt.


[ad_2]
Source link

From Malvertising to Ransomware: A ThreatDown webinar recap

andreasc
-
0
From Malvertising to Ransomware: A ThreatDown webinar recap
[ad_1]

Get the low-down on our recent webinar From Malvertising to Ransomware.

Our recent webinar From Malvertising to Ransomware highlight the clear connection between malvertising—the practice of embedding malicious code within legitimate online advertisements—and the epidemic of ransomware attacks affecting businesses globally.

Presented by Mark Stockley, security evangelist at Malwarebytes, and Jerome Segura, Director of Threat Intelligence at Malwarebytes, the webinar explains how malvertising has evolved into an effective entry point in the cyberattack “kill chain.”

By leveraging the broad reach and precision targeting of digital advertising, threat actors can compromise systems, gather valuable credentials, and ultimately lay the groundwork for debilitating ransomware attacks. Speakers mention the Royal ransomware group as just one example of a threat actor using this tactic.

Toward the end of the webinar, the speakers provide a set of tips for protecting businesses from these attacks, including the importance of tools such as Endpoint Detection and Response (EDR) and Managed Detection and Response (MDR) in combatting them.

If you missed the live session, it’s not too late to get the low-down on the malvertising-ransomware connection. Watch the full webinar here to ensure you’re informed and prepared to tackle these nasty threats!

Watch the webinar 


[ad_2]
Source link

As expected, Musk is blocking Threads links on Twitter

andreasc
-
0
As expected, Musk is blocking Threads links on Twitter
[ad_1]

It was truly only a matter of time before this was the case, but Elon Musk has started to block Threads links and mentions on Twitter. Musk also did this with Mastodon shortly after he took over the site, when many decided to give alternatives a try. So we all knew this was coming.

However, apparently, if you pay to promote a Tweet that mentions Threads and has a link to Threads, it’s okay.

Screenshot 2023 07 13 at 11 37 03 AMIf you search for URL:threads.net you’ll find that there’s nothing popping up. However, if you search for URL:threads net without the period, the links will show up. So there is a pretty good workaround here, thankfully.

Some might think this is a bug, but this is likely deliberate. Since Threads launched, Musk has been upset about it, and Zuckerberg launching it.

Threads has 100 million users and continues to grow

Threads shattered the record for the fastest app to hit 100 million users, which was set by ChatGPT at around a month. Threads did it in just 5 days. Of course, a big reason for that was indeed the fact that it was tied so closely to Instagram. But that does not sit well with Musk, who is starting to see even more competition to his app, as he tries (whether inadvertently or not) to kill his app.

Musk had challenged Zuckerberg to a cage match, but then after Threads launched, he decided to change that to a different kind of contest. It’s unclear whether either one will happen anytime soon, but it is pretty fun to see the contention between the two.

Threads is missing quite a few features, which is resulting in a lot of people heading back to Twitter, because they can actually search for things. As long as they aren’t links to Threads. The site is also missing, well, a website. As well as DMs, and so much more. Which, Instagram head, Adam Mosseri has said is coming.


[ad_2]
Source link

Top Google AR software executive resigns from the company

andreasc
-
0
Top Google AR software executive resigns from the company
[ad_1]

Netizens watch as a top Google AR software executive turns in his resignation letter. The reason behind this decision shows how off-course Google might be regarding its AR endeavors. Aside from this top executive, other workers in Google’s AR department have similar complaints about the company’s attitude towards leadership.

Mark Lucovsky, a former top executive working with Google’s AR team, has publicly resigned. The expert in the field of AR software and operating systems took to his Twitter account to announce his retirement. While announcing that he is leaving the company, he was also kind to give details as to his exit.

The reasons he gave might bring questions to the mind of netizens looking forward to Google’s growth in the AR and VR industry. But it seems like the company is still struggling to stand its ground. Mark’s exit from Google is proof that the tech giant is barely standing on one foot in the AR and VR industry.

Here is what the resignation of one of Google’s top AR software executives proves

The exit of Mark Lucovsky raises a new set of concerns about Google’s plans for the AR and VR industry. Currently, the likes of Meta are topping the games in this industry, with Apple working to get its fair share. Over the years, fans have anticipated an AR or VR product launch from Google to no avail, and the company’s stand in this industry seems to be uncertain.

While stating the reason for his resignation, Mark Lucovsky points out recent changes to Google’s AR department. Over the past few months, netizens have seen reports of leadership changes within Google’s AR development ranks. With each change comes a new objective, which might not fall in line with the previous objective under former leadership.

These changes make work quite hard for those working in Google’s AR department. Each new AR and XR tech product the company announces keeps getting met with Google’s unforgiving axe. Now there seems to be a shift from hardware development to a focus on AR software.

These changes are very unhealthy for Mark’s career and his future in the AR industry. Google is also drawing attention to itself for the wrong reasons, as it fails to get its affairs together concerning AR technology. With the influx of companies to the AR industry, Google might find it hard to catch up if they don’t get things in place as soon as possible.


[ad_2]
Source link

Huawei may return to the 5G market thanks to a loophole

andreasc
-
0
Huawei may return to the 5G market thanks to a loophole
[ad_1]

Huawei was one of the biggest threats to Samsung… until it was banned from the US. Now, the company is in a tough spot, as it can’t properly produce 5G phones without help from the US. However, Huawei might have a chance to return to the 5G market with the help of a loophole. However, it’s still an uphill battle.

Back in 2020, the former US president banned Huawei from selling its phones in the United States over fears of the company spying on US citizens. Not only that, but this restricted US-based company Qualcomm from supplying its chips to the company, which means that it can’t use the company’s 5G modems.

So, Huawei is basically blocked from providing any 5G phones, and that’s a major bummer, as much of the smartphone market has adopted 5G as the standard. The company is stuck providing its users with 4G phones. As you can imagine, this had a massive negative effect on its sales.

The company, at its peak (2019) raked in about 483 Chinese Yuan (about $67 billion) and moved more than 240 million units. However, a year later, it brought in about half of the profit of the previous year.

Huawei could return to The States through a loophole

While Huawei was severely hindered by the US sanctions, the company is still looking to pull itself out of its hole. Three separate sources informed Reuters of the company’s plans.

Huawei might be able to score 5G chips in its home country by partnering with a chipmaking company called Semiconductor Manufacturing International Co (SMIC). The report states that Huawei will use “its own advances in semiconductor design tools”, so it seems that SMIC could use Huawei’s design and produce the chips.

This means that the company won’t have to rely on 4G technology or get back in good with The States. It will be able to provide its own 5G chips for its phones.

The timetable for this venture seems pretty optimistic, as the company is planning its heroic return to the 5G market by the end of the year. If this goes off without a hitch, then it will be a long road to returning to its former prime.


[ad_2]
Source link

OpenAI is under investigation by the FTC

andreasc
-
0
OpenAI is under investigation by the FTC
[ad_1]

This new generative AI boom is one of the biggest technological revolutions of the modern age, and our governing bodies just aren’t ready for it. With each new innovation, tension rises between consumers, lawmakers, and the companies that push the technology forward. OpenAI is under investigation by the FTC (Federal Trade Commission) over how ChatGPT could harm people.

The OpenAI FTC investigation

Generative AI technology is still in its infancy, so we’re still feeling out the situation. We speculate about the negative effects of generative AI on the workforce, creators, and countless industries. This is why the FTC is looking into OpenAI, the most popular generative AI company.

According to The Washington Post (via CNN Business), the FTC presented OpenAI with a 20-page investigation demand. It’s looking deep into the company to find information like how likely ChatGPT is to give inaccurate information, the potential to cause “reputational harm”, how the company obtains users’ information, how it handles that data, and so on.

The document leaves no stone unturned, as it wants to know about what complaints it’s received from users along with lawsuits against it. There are dozens of requests in the document, sources near to the matter were able to confirm with CNN. As this investigation persists, we hope to know more about what the FTC wants to know.

If the FTC finds that OpenAI’s creations could cause actual harm to the public, we can expect some legal action to take place. Only time will tell.

This is necessary

This investigation might seem like a step back for AI, but it’s all necessary. When it comes to AI, one word stands out above the rest, and that’s Regulation. Innovation in generative AI hit a point of rapid acceleration as more people discovered how it could benefit them. It’s advancing so fast that we don’t have any laws to police it.

We’re now debating if scraping data is illegal or just immoral. There are no laws outright stating that AI-generated can’t be copyrighted. It’s still the wild west when it comes to AI, and that makes a lot of people nervous.

Sure, AI can bring some objective benefits to the table- and you can’t make an omelet without breaking some eggs- but AI is nipping at the heels of some major industries. It threatens to put creators like artists, composers, developers, and writers out of their jobs. That’s not all, several upper-level executives fear that AI could take their jobs as well.

We also can’t forget about AI deep-fakes. This technology gives people the ability to make fake videos and audio clips of people doing and saying whatever they want. It doesn’t take an Einsteinian intellect to tell why that’s bad.

We need investigations like these to better ascertain what kind of dangers we’re looking at in the future. We’ll need to stay tuned to see the results of this investigation.


[ad_2]
Source link

GeForce NOW users can stream two new games this week

andreasc
-
0
GeForce NOW users can stream two new games this week
[ad_1]

If you subscribe to GeForce NOW then you’ll have two games coming to the service this week, including another title from Capcom. Unfortunately, it is kind of a light week in terms of new games to stream.

That could be because we’re headed into the third week of the service’s newly added monthly games with next week’s releases. See, if you’re new to GeForce NOW, here’s how things work. The service adds new games to the library every Thursday. As has always been the case you still need to own these games on their respective storefronts. Which usually amounts to Steam, or the Epic Games Store. But it can also include the Ubisoft Store, and in some cases GOG. And once owned, you can stream them via GeForce NOW. So long as the service supports those titles.

Every week NVIDIA also tends to add more than a few games. But in months where there aren’t a lot of new games coming, there ends up being one week where we don’t see much. This week is that week. Here’s what you have to look forward to.

Capcom action rpg Dragon’s Dogma: Dark Arisen joins GeForce NOW

Two games might be a small list for this week’s new additions, but at least one of them is a heavy hitter. Dragon’s Dogma: Dark Arisen is an action rpg featuring some cool combat and even cooler gameplay mechanics. It’s set in a vast open world. So there’s lots to explore and plenty of hours of game time to keep you entertained. What’s more is that the game supports 4K visuals and 60 frames per second, and it’s just $30 on steam.

Now would also be a good time to play it since Dragon’s Dogam II is on the horizon. Capcom hasn’t confirmed a release date on this one yet since it wasn’t announced too long ago. But you’re bound to need lots of time to finish Dark Arisen and the original Dragon’s Dogma, so why not get them out of the way while you can. Especially with games like Armored Core VI, Starfield, and the Cyberpunk 2077 expansion releases just around the corner.

As for the second title, it’s a day and date release of Jagged Alliance 3, which lands on Steam on July 14. That means you won’t be able to stream this game until tomorrow. As it’s expected to unlock via Steam in about 16 hours.


[ad_2]
Source link

Jenkins Plugin Flaw let Attackers Gain Admin Access

andreasc
-
0
Jenkins Plugin Flaw let Attackers Gain Admin Access
[ad_1]

A recent security advisory from Jenkins reported that they had fixed 24 vulnerabilities affecting multiple Jenkins plugins.

This Flaw includes 5 High, 18 Medium, and 1 Low severity vulnerabilities.

Patches have been released for some of the affected plugins, while others are still under development.

Affected Plugins and their Versions

The list of affected Jenkins plugins includes,

  • Active Directory Plugin up to and including 2.30
  • Assembla Auth Plugin up to and including 1.14
  • Benchmark Evaluator Plugin up to and including 1.0.1
  • Datadog Plugin up to and including 5.4.1
  • ElasticBox CI Plugin up to and including 5.0.1
  • External Monitor Job Type Plugin up to and including 206.v9a_94ff0b_4a_10
  • mabl Plugin up to and including 0.0.46
  • MathWorks Polyspace Plugin up to and including 1.0.5
  • OpenShift Login Plugin up to and including 1.1.0.227.v27e08dfb_1a_20
  • Oracle Cloud Infrastructure Compute Plugin up to and including 1.0.16
  • Orka by MacStadium Plugin up to and including 1.33
  • Pipeline restFul API Plugin up to and including 0.11
  • Rebuilder Plugin up to and including 320.v5a_0933a_e7d61
  • SAML Single Sign On(SSO) Plugin up to and including 2.3.0
  • Sumologic Publisher Plugin up to and including 2.2.1
  • Test Results Aggregator Plugin up to and including 1.2.13

CVE(s):

The list of CVEs, severity, and their related affected plugin are as mentioned below,

CVE IDSeverityDescriptionAffected Plugin
CVE-2023-37946HighSession fixation vulnerability in OpenShift Login PluginOpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier
CVE-2023-37957HighCSRF vulnerability in Pipeline restFul API PluginPipeline restFul API Plugin 0.11 and earlier
CVE-2023-37952, CVE-2023-37953 HighCSRF vulnerability and missing permission checks in mabl Plugin allow capturing credentialsmabl Plugin 0.0.46 and earlier
CVE-2023-37942HighXXE vulnerability in External Monitor Job Type PluginExternal Monitor Job Type Plugin 206.v9a_94ff0b_4a_10 and earlier
CVE-2023-37961MediumCSRF vulnerability in Assembla Auth PluginAssembla Auth Plugin 1.14 and earlier
CVE-2023-37947MediumOpen redirect vulnerability in OpenShift Login PluginOpenShift Login Plugin 1.1.0.230.v5d7030b_f5432 and earlier
CVE-2023-37954MediumCSRF vulnerability in Rebuilder PluginRebuilder Plugin 320.v5a_0933a_e7d61 and earlier
CVE-2023-37948MediumMissing SSH host key validation in Oracle Cloud Infrastructure Compute PluginOracle Cloud Infrastructure Compute Plugin 1.0.16 and earlier
CVE-2023-37958, CVE-2023-37959MediumCSRF vulnerability and missing permission checks in Sumologic Publisher PluginSumologic Publisher Plugin 2.2.1 and earlier
CVE-2023-37962, CVE-2023-37963MediumCSRF vulnerability and missing permission checks in Benchmark Evaluator PluginBenchmark Evaluator Plugin 1.0.1 and earlier
CVE-2023-37955,  CVE-2023-37956MediumCSRF vulnerability and missing permission check in Test Results Aggregator PluginTest Results Aggregator Plugin 1.2.13 and earlier
CVE-2023-37960MediumArbitrary file read vulnerability in MathWorks Polyspace PluginMathWorks Polyspace Plugin 1.0.5 and earlier
CVE-2023-37949MediumMissing permission check in Orka by MacStadium Plugin allows capturing credentialsOrka by MacStadium Plugin 1.33 and earlier
CVE-2023-37944MediumMissing permission check in Datadog Plugin allows capturing credentialsDatadog Plugin 5.4.1 and earlier
CVE-2023-37964, CVE-2023-37965MediumCSRF vulnerability and missing permission checks in ElasticBox CI Plugin allow capturing credentialsElasticBox CI Plugin 5.0.1 and earlier
CVE-2023-37950MediumMissing permission check in mabl Plugin allows enumerating credentials IDsmabl Plugin 0.0.46 and earlier
CVE-2023-37951MediumExposure of system-scoped credentials in mabl Pluginmabl Plugin 0.0.46 and earlier
CVE-2023-37945MediumMissing permission check in SAML Single Sign On(SSO) PluginSAML Single Sign On(SSO) Plugin 2.3.0 and earlier
CVE-2023-37943LowPassword transmitted in plain text by Active Directory Plugin Active Directory Plugin 2.30.1 and earlier

High Severity Vulnerabilities

CVE-2023-37946: Session Fixation Vulnerability

This vulnerability exists due to improper session management in the OpenShift Login Plugin due to which previous sessions are not invalidated. This can allow threat actors to gain administrator access with social engineering techniques.

The CVSS Score for this vulnerability is yet to be confirmed.

CVE-2023-37957: CSRF vulnerability in Pipeline

This vulnerability exists due to the lack of POST requests to an HTTP endpoint which results in Cross-Site Request Forgery (CSRF).

An attacker can connect to Jenkins with an attacker-specified URL resulting in the impersonation of a victim with a newly generated JCLI token. The CVSS Score for this vulnerability is yet to be confirmed.

CVE-2023-37952, CVE-2023-37953: CSRF Vulnerability and Missing Permission

A vulnerability exists as several HTTP endpoints do not perform permission checks which allows threat actors to obtain the connection to Jenkins with Overall/Read permissions through attacker-specified URL and credential IDs collected with another method.

In addition to this, these endpoints do not require POST requests which result in Cross-Site Request Forgery. The CVSS Score for these vulnerabilities is yet to be confirmed.

CVE-2023-37942: XXE vulnerability in External Monitor

This vulnerability exists due to the misconfiguration of the XML parser, which prevents External XML Entity (XXE) attacks.

This allows threat actors to parse a crafted HTTP request with XML data that results in the extraction of sensitive information from Jenkins Controller or Server-Side Request Forgery (SSRF).

The CVSS Score for this vulnerability is yet to be confirmed.

Fixed Plugins

Jenkins has fixed some of the affected plugins, which include,

  • Active Directory Plugin should be updated to version 2.30.1
  • Datadog Plugin should be updated to version 5.4.2
  • External Monitor Job Type Plugin should be updated to version 207.v98a_a_37a_85525
  • mabl Plugin should be updated to version 0.0.47
  • OpenShift Login Plugin should be updated to version 1.1.0.230.v5d7030b_f5432
  • Oracle Cloud Infrastructure Compute Plugin should be updated to version 1.0.17
  • Orka by MacStadium Plugin should be updated to version 1.34
  • SAML Single Sign On(SSO) Plugin should be updated to version 2.3.1

Unfixed Plugins

The plugins for which fixes are not available include,

  • Assembla Auth Plugin
  • Benchmark Evaluator Plugin
  • ElasticBox CI Plugin
  • MathWorks Polyspace Plugin
  • Pipeline restFul API Plugin
  • Rebuilder Plugin
  • Sumologic Publisher Plugin
  • Test Results Aggregator Plugin

Users of these Jenkins plugins are advised to upgrade to the latest versions to avoid unauthorized access to systems. Other plugins are still being fixed, and patches are yet to be made available.

More details about all these vulnerabilities can be found on the Jenkins Security Advisory Page.


[ad_2]
Source link

The Google Calendar widget gets the Material You paint job

andreasc
-
0
The Google Calendar widget gets the Material You paint job
[ad_1]

There are still bits and pieces of the Android operating system that still need the Material You makeover. However, Google is hard at work giving all of its services the same look. According to a tweet from the Google Calendar Twitter, the Google Calendar widget is getting the Material You paint job.

It’s been a long path for Google to walk applying the Material You design language to all of its apps and services. Every so often, we see Google revamping an app or service to better reflect the Material You aesthetic. Not too long ago, the company delivered two new Google News widgets adorned with Material You.

The Google Calendar widget gets the Material You paint job

A ton of people use the Google Calendar widget to get a quick glance at their upcoming events. The widget itself has remained pretty neutral in terms of its colors. It’d either have a white background or a dark gray background depending on your phone’s theme.

However, looking at the tweet, Google is going to make the widget better reflect the color scheme chosen for your phone. As you know, Stock Android and several skins take the colors present in your wallpaper and create a color scheme based on them. This color scheme pervades your whole UI.

The Google Calendar widget will adopt the color scheme. The background of the widget will more closely match the color of your wallpaper. The Add event button will be a darker shade of the color. Google shared a GIF of this change, but we only see it in light mode. If it’s in dark mode, we expect the Add event button to be a lighter shade.

We’re not 100% sure when Google’s going to bring the change to the public. we weren’t able to see it on our Pixel 6, so it might still be rolling out.


[ad_2]
Source link
1...1,0921,0931,094...1,480Page 1,093 of 1,480