OpenAI seeks ways to pull the plug on Google and occupy its search engine throne

andreasc
-
0
OpenAI seeks ways to pull the plug on Google and occupy its search engine throne
[ad_1]

Sergey Brin and Larry Page’s lovechild – that’s just another way of saying “Google!” – might be in danger. OpenAI is coming for its search engine throne, a new hot rumor has it.

That means in the future, one might be “OpenAI-ng it” instead of “Googling it”, as MSPowerUser states. The source is The Information, citing an anonymous insider which claims OpenAI is currently developing a web search product. The details remain unclear: will the search tool be integrated within the popular ChatGPT platform… or this could be some separate, standalone product.

Regardless, it’s clear that such a move is aimed directly at Google’s search engine hegemony. OpenAI has taken the “Shoot for the stars!” mantra quite literally and it will be very interesting to see what comes out of it.

If it’s real. So far, no confirmation comes from Sam Altman’s project.

Leaks and rumors about OpenAI could turn out to be true, as the company has resorted to hiring investigators to crack down leakers and to “mitigate potential insider threats”.

The undisclosed source declares that the OpenAI search engine tool might utilize Bing, Microsoft’s search platform, “for some of its functionality”. This aligns with Microsoft’s significant investments in OpenAI and its ongoing integration of GPT-based AI into products like Bing Chat and Copilot.

[ad_2]
Source link

Critical DNSSEC Flaw Attacker Bring DNS With Single DNS Packet

andreasc
-
0
Critical DNSSEC Flaw Attacker Bring DNS With Single DNS Packet
[ad_1]

A new flaw has been discovered in DNSSEC, which, when exploited by threat actors, could result in the unavailability of technologies such as web browsing, email, and instant messaging. This new class of attacks has been termed “KeyTrap” by researchers. 

Moreover, a threat actor could completely disable large parts of the worldwide internet. KeyTrap attacks affect not only DNS but also the applications using it. The “KeyTrap” class of attacks has been assigned with CVE-2023-50387, and the severity is yet to be categorized.  As of December 2023, 31.47% of the web clients used DNSSEC-validating DNS resolvers worldwide. 

Document
Live Account Takeover Attack Simulation

Live attack simulation Webinar demonstrates various ways in which account takeover can happen and practices to protect your websites and APIs against ATO attacks.

Technical Analysis

This particular vulnerability exists due to the processing of responses from specially crafted DNSSEC-signed zones, which causes CPU exhaustion on a DNSSEC-validating resolver.

Successful exploitation of this vulnerability could significantly affect the resolver’s performance, disrupting the DNS resolution service.

As a workaround, DNSSEC validation can be disabled entirely, preventing this vulnerability. However, this was not a recommended resolution. Additionally, there is no evidence of active exploitation of this vulnerability by threat actors.

To fix this vulnerability, it is advised to upgrade to the following versions of BIND 9 and BIND Supported Preview Edition:

Nevertheless, researchers also stated that “The flaws are not recent,” describing an obsolete internet standard, RFC 2535, from 1999. Fast forwarding to 2012, there was another implementation flaw for DNSSEC validation in standards RFC 6781 and RFC 6840. 

Although this vulnerability has existed for the past 25 years, it went unnoticed by the community due to the complexity of the DNSSEC validation requirements. 

If this vulnerability had been exploited, it would not only result in the unavailability of DNS but also could have potential risks of disabling security mechanisms such as anti-spam defenses, Public Key Infrastructure (PKI), or even inter-domain routing security like RPKI (Resource Public Key Infrastructure).

Furthermore, a complete report about this vulnerability has been published by ATHENE researchers, which provides detailed information about the impact, attack types, vectors, and other information.

Stay updated on Cybersecurity news, Whitepapers, and Infographics. Follow us on LinkedIn & Twitter.


[ad_2]
Source link

New Xiaomi 14 Ultra images share even more details about the phone

andreasc
-
0
New Xiaomi 14 Ultra images share even more details about the phone
[ad_1]

The Xiaomi 14 Ultra renders surfaced yesterday for the very first time. Those images basically revealed the phone’s design to the world. Well, new Xiaomi 14 Ultra images are now here, and they reveal even more details about the device.

New Xiaomi 14 Ultra images give us even more details about the upcoming flagship

Yesterday’s shots did show us the phone from all sides except for one… its front. Well, these images from MySmartPrice do change that. Two images have appeared, as you can see below this paragraph.

Xiaomi 14 Ultra front and back leak

They’re showing both the black and white colors of the Xiaomi 14 Ultra. Those are seemingly the only colors that are coming. They will both have a vegan leather backplate, based on what we’ve seen thus far. There are some rumors about glass models too, but we’re not sure about that.

The display will be flat, it seems

In any case, these images of the device do show us both the front and the back sides. Based on these images, the display won’t be curved as we thought it would. The panel itself seems to be flat, but the curve towards the sides is there. So basically the sides will be curved, but the display won’t, at least that’s what it looks like here

The Xiaomi 14 Ultra will follow in the Samsung Galaxy S24 Ultra‘s footsteps, kind of. Samsung’s flagship also switched to a flat display this year. Xiaomi seems to be going the same route.

The bezels around the display are very minimal, and they actually seem to be uniform, but we cannot confirm that just yet. All the physical buttons sit on the right-hand side, and the camera is centered at the top of the display.

The camera island does seem very similar to the one included in the Xiaomi 13 Ultra

The camera island on the back will look very similar to last year, in terms of the sensor arrangement on the inside. Four cameras will be present on the back, but the back side of the phone will be flat. On the Xiaomi 13 Ultra, the back side gradually rises in height towards the camera island. That’s not the case here, it seems.

The Xiaomi 14 Ultra will launch on February 25 for global markets. It will launch at MWC 2024 in Barcelona. There is some talk about a February 22 launch in China, but that event is not official yet.


[ad_2]
Source link

Privacy-first DuckDuckGo browser adds password sync feature

andreasc
-
0
Privacy-first DuckDuckGo browser adds password sync feature
[ad_1]

DuckDuckGo, the company behind the privacy-oriented search engine and web browser of the same name, has introduced a new Sync & Backup feature for its browser. It lets you sync your saved passwords, bookmarks, and Email Protection settings across multiple devices. In line with the firm’s privacy-first approach, the feature doesn’t require an account to sync the information.

DuckDuckGo browser can now sync saved passwords across your devices

DuckDuckGo isn’t a household name in the browser world but is fairly popular among privacy-conscious users. It takes pride in being extremely privacy-oriented while still offering most of the features you expect from a web browser if not all. One of its biggest drawbacks was the lack of a password sync feature. People using DuckDuckGo for privacy couldn’t access their saved passwords across their devices.

The company has now addressed this limitation. With the new Sync & Backup features, you can find your saved passwords, bookmarks, and more on the DuckDuckGo browser on all of your Android or iOS phones, tablets, and computers. However, since it doesn’t require an account, you will have to manually link all your devices to sync the information. Follow the steps below to do that.

Once you have updated DuckDuckGo to the latest version, click on the three vertical dots in the top-right corner and select Settings. Tap on Sync & Backup and select Sync With Another Device. If asked, unlock your device to verify your identity. Now, repeat these steps on all of your devices. On phones or tablets, you will see a QR code. On laptops and desktop computers, you will find an alphanumeric code.

Scan the QR code on one device from the other or manually enter the alphanumeric code to sync the devices. If only one of your devices synced, go back to the unsynced device and select Sync and Back Up This Device under the Single-Device Setup menu in Sync & Backup. This should sync the device with others. You will find a list of all your synced devices here. You can edit device names and adjust your settings.

DuckDuckGo Sync feature 2

Your data is end-to-end encrypted

DuckDuckGo makes you sync your devices manually to protect your privacy. This ensures that your data remains end-to-end encrypted throughout the process. “Your passwords are completely inaccessible to anyone but you,” the company assures. “That includes us: DuckDuckGo cannot access your data at any time,” because the unique key needed to decrypt it is stored locally on your devices.

This means DuckDuckGo can’t help you recover the saved data in case you lose or damage your devices. Thankfully, there is a workaround that works locally. When you first set up Sync, you will be asked to download a Recovery PDF. The document contains your recovery code. You have to scan this code to recover your passwords and other saved data on DuckDuckGo. Make sure to store this document securely on some other device.

DuckDuckGo Sync feature 3


[ad_2]
Source link

Xbox February update adds touch controls for remote play on Android and iOS

andreasc
-
0
Xbox February update adds touch controls for remote play on Android and iOS
[ad_1]

Whether you’re rocking an iPhone or an Android phone as your daily driver, you are no longer limited to playing games specifically designed for smaller screens. Microsoft promised last month that it will make it possible to play games on iOS and Android devices without having to use a controller.

Today, the Xbox February update is bringing the much-needed touch controls for remote play with the iOS and Android Xbox apps. This means that even if you don’t have an Xbox Wireless Controller, you can now play games when away from your console.

The same custom touch layouts available through Xbox Cloud Gaming (Beta) are now available when remotely playing games from your Xbox console. The vast majority of games support touch controls, including Minecraft Dungeons, Psychonauts 2, and Sea of Thieves.

In fact, Xbox remote play supports custom touch control layouts on more than a hundred games when using the Xbox app on iOS, Android, and Windows devices.

Besides adding touch controls in Xbox remote play, the latest Xbox update brings a new thumbstick calibration tool for Xbox Wireless Controllers, as well as improved filtering and sorting in My games & apps.

[ad_2]
Source link

Microsoft Patch Tuesday 2024 : 73 Security Flaws

andreasc
-
0
Microsoft Patch Tuesday 2024 : 73 Security Flaws
[ad_1]

As part of its February 2024 Patch Tuesday updates, Microsoft has published patches to address 73 security flaws, including two zero-day vulnerabilities that have been actively exploited.

Five of the 73 vulnerabilities are classified as ‘Critical’, 65 as ‘Important’, and three as ‘Moderate’ in severity.

Document
Live Account Takeover Attack Simulation

Live attack simulation Webinar demonstrates various ways in which account takeover can happen and practices to protect your websites and APIs against ATO attacks.

Two Zero-Days Patched

The two vulnerabilities identified as being actively targeted are:

CVE-2024-21351 – Windows SmartScreen Security Bypass

The vulnerability, which has a CVSS score of 7.6, enables an attacker to insert code into SmartScreen and perhaps acquire code execution. This could result in some data disclosure, a lack of system availability, or both. 

“An authorized attacker must send the user a malicious file and convince the user to open it,” Microsoft said.

Thus, if this vulnerability was successfully exploited, an attacker could bypass the SmartScreen user experience. 

Microsoft does not disclose the widespread of these attacks, although it is anticipated that the number of exploits will rise.

CVE-2024-21412 – Internet Shortcut Files Security Feature Bypass Vulnerability

“An unauthenticated attacker could send the targeted user a specially crafted file that is designed to bypass displayed security checks,” Microsoft.

In this case, it would be impossible for the attacker to convince a user to see content that they controlled. In addition, by clicking on the file link, the attacker would have convinced them to take action.

As a result, the attacker must convince the victim to open a malicious file that they sent them.

According to a Trend Micro report, the Water Hydra APT is using the vulnerability to infect victims with the malware DarkMe. 

After developing a proof-of-concept (PoC) for additional testing, the researchers found that the original shortcut bypassed the CVE-2023-36025 patch while evading SmartScreen security measures.

Critical Security Flaws Addressed

Five critical vulnerabilities, including those involving privilege elevation (CVE-2024-21410), denial of service (CVE-2024-20684), remote code execution (CVE-2024-21357, CVE-2024-21413), and information disclosure (CVE-2024-21380) are fixed in this Patch Tuesday.

Other vendors, in addition to Microsoft, have also provided security upgrades in recent weeks to address multiple vulnerabilities. These firms include Google, Adobe, Cisco, ExpressVPN, Ivanti, Fortinet, Linux, SAP and JetBrains.

The complete list of the 73 Microsoft CVEs may be found here.

Stay updated on Cybersecurity news, Whitepapers, and Infographics. Follow us on LinkedIn & Twitter.


[ad_2]
Source link

Do you hate voice messages? Skype announces Audio Transcription feature and makes them into text

andreasc
-
0
Do you hate voice messages? Skype announces Audio Transcription feature and makes them into text
[ad_1]

If you find yourself often in noisy environments, or you’ve got hearing problems, or you haven’t got the time to listen to lengthy voice messages – or you simply hate it when your friends bombard you with 60-second “uhhhh”/“uhmmmm”-plagued voice messages that actually contain 2 lines of meaningful information – well, Skype has you covered.The once-almighty chat platform announces the new Audio Transcription feature that converts voice messages into text for improved clarity and accessibility (via MSPowerUser). Users can activate transcription with a tap, seeing both audio waveform and text simultaneously.

Thanks to Skype’s latest Insider build (8.113) the new feature for improved accessibility and clarity in audio messaging (Audio Transcription) is accessible: it allows users to convert voice messages into text format, enhancing message comprehension and facilitating communication for users with hearing impairments.

Skype’s commitment to inclusivity shines brighter with audio transcriptions, making audio messages accessible to everyone, including those with hearing impairments.

“Moreover, Skype also introduced a top menu selector for easier navigation between reaction categories, eliminating the need for extensive scrolling. The user-friendly design features readily accessible favorite reactions and expands the emoticon library with more options for expressive communication”, the report reads.

Say goodbye to endless scrolling! Our top menu selector allows you to swiftly jump between categories like Love, Celebrations, and Agreement, making it a breeze to find your desired reaction.

These features are currently available in the Insider build and are expected to be released to the broader user base in the near future!


[ad_2]
Source link

New York Mayor sues Instagram, YouTube, TikTok parent companies over youth mental health crisis

andreasc
-
0
New York Mayor sues Instagram, YouTube, TikTok parent companies over youth mental health crisis
[ad_1]

Eric Adams, Mayor of New York City, said that his administration has filed a lawsuit against social media companies for fueling mental health crisis among the youth (via Reuters).

The lawsuit includes Facebook and Instagram’s parent company Meta, as well as YouTube’s Google (legally known as Alphabet), Snapchat’s Snap Inc. and TikTok’s ByteDance. The lawsuit is filed in the California Superior Court and alleges that the companies intentionally designed their platforms to “purposefully manipulate and addict children and teens to social media applications”.

“Over the past decade, we have seen just how addictive and overwhelming the online world can be, exposing our children to a non-stop stream of harmful content and fueling our national youth mental health crisis”, Adams said in a statement.

This is far from the first time that social media giants are hit with similar lawsuits – they’ve come under intense scrutiny as regulators push them to protect children from harmful content. Meta, TikTok and YouTube already face hundreds of lawsuits filed on behalf of children and school districts over the addictiveness of social media, the report reads.

Just last month Meta CEO Mark Zuckerberg apologized to families at a US Senate hearing about the impact that social media has on children.

Per their own spokesperson, Meta says they wanted teens to have “safe, age-appropriate experiences online”, while TikTok said it will continue to work to keep the community safe by tackling industry-wide challenges.

Alphabet (read Google, YouTube) denied the allegations: “We’ve built services and policies to give young people age-appropriate experiences, and parents robust controls. The allegations in this complaint are simply not true”, Google’s spokesperson Jose Castaneda said in a statement.


[ad_2]
Source link

Migrate SQL Server to PostgreSQL

andreasc
-
0
Migrate SQL Server to PostgreSQL
[ad_1]

Many companies follow the long-term modern trend to migrate databases from commercial DBMS to free open-source equivalent in order to reduce total cost of ownership. For this purpose, PostgreSQL is the ideal choice among all free database management systems due to the following advantages:

– it is 100% compliant with SQL standard
– it supports point-in-time recovery
– it supports sophisticated locking mechanisms
– it provides advanced data types such as multi-dimensional arrays and spatial

The most straight forward way to migrate from SQL Server to PostgreSQL manually or semi-manually is known as extract-transfer-load or ETL model. It consists of the following steps:

– All SQL Server database entries (table definitions, indexes and constraints) are extracted in form of CREATE-statements
– Those items are transformed to comply with PostgreSQL syntax of CREATE-statements (with respect to types mapping and naming rules) and loaded to the target database
– SQL Server data is extracted from the source database into CSV files used as external intermediate storage
– The CSV files must be transformed to comply with PostgreSQL format when it is necessary (special attention to dates and binary data)
– The final step is to load the resulting data into the PostgreSQL database

Now, let’s explore each of those steps in details. To extract definitions of SQL Server tables, open Microsoft SQL Server Management Studio, right-click on the database name, then click on ‘Tasks > Generate Scripts’ menu item. Navigate to “Set scripting options” tab in the appeared window, click on Advanced link and select “data and schema” in the ‘General’ section.

The resulting script must be modified according to PostgreSQL format as follows:

– remove square brackets around types
– replace all square brackets around names of database entries by double quotes
– replace all occurrences of the default SQL Server schema “dbo” by PostgreSQL equivalent “public”
– remove SQL Server keywords that are optional and not supported by PostgreSQL (i.e. “WITH NOCHECK”, “CLUSTERED”)
– remove any specifications of filegroup, for example “ON PRIMARY”
– change SQL Server data type “INT IDENTITY(…)” to PostgreSQL “SERIAL”
– convert types that are not supported by PostgreSQL into equivalents (i.e. “DATETIME” becomes “TIMESTAMP”, “MONEY” becomes NUMERIC(19,4))
– all statements “GO” used to terminate SQL Server queries must be replaced by semicolons “;”

Next step to migrate SQL Server to PostgreSQL is processing the data, which can be accomplished with the use of the Microsoft SQL Server Management Studio:

– Right-click on the database to migrate, then navigate to the Tasks > Export Data menu
– Using intuitive interface of the wizard specify “Microsoft OLE DB Provider for SQL Server” as data source and “Flat File Destination” as destination.

After the export is completed, the resulting data will appear in the specified destination file according to the comma-separated values (CSV) format.

Now it is time to load data from CSV files to PostgreSQL tables through the “COPY” command like this:

COPY <table name> FROM <path to csv file> DELIMITER ‘,’ CSV;

If you receive a “Permission denied” error, try the “\COPY” command instead.

The steps above illustrate that manual conversion is a time-consuming procedure with high risk of data loss or corruption. Fortunately, there are some special tools which can migrate SQL Server to PostgreSQL within just a couple of clicks making the entire procedure smooth and safe. One of such solutions is MS SQL to PostgreSQL converter, a program having all necessary features to handle migration of large and complicated databases between the two DBMS. It has been developed by Intelligent Converters, software company focusing on database conversion and synchronization techniques since 2001.

Basic features of the converter:

– Schemas, data, sequences, indexes, constraints and views are migrated from SQL Server to PostgreSQL
– All modern versions of on-premises and could variations of DBMS are supported
– Merging and synchronizing PostgreSQL databases with SQL Server data
– Option to script and schedule the database migration via command line version of the tool
– Store configuration of the completed migration into a profile to simplify next launch

Besides those basic features the converter offers a few powerful capabilities to make the migration even more customizable. First is filtering data to migrate via SELECT queries. SQL Server to PostgreSQL converter allows users to compose SELECT query over the source database and then migrate resulting rowset as if it would be a regular table. This option may be uses to filter data, rename columns or tables, merge data from multiple into a single one and many other tasks.

Next capability is called ‘Edit Table’. It allows to completely customize resulting table: change name, type and attributes of any column and exclude some columns from migration. It is implemented via dialog window having easy-to-use intuitive interface, so any technical skills are not required to entirely customize the database migration.

Learn more about how to migrate SQL Server to PostgreSQL and the related software solutions at the homepage of Intelligent Converters.


[ad_2]
Source link

Mozilla announces job cuts & product changes under new CEO

andreasc
-
0
Mozilla announces job cuts & product changes under new CEO
[ad_1]

Days after naming a new CEO, Mozilla has announced a job cut affecting about 5% of its workforce. The company, best known for the Firefox browser, is laying off around 60 employees. It is also shutting down Mozilla Hubs and scaling back investment in several other products.

Mozilla cuts around 60 jobs as part of a shake-up under the new CEO

Last week, Mozilla announced that Mitchell Baker is stepping down from the role of CEO to become the company’s Executive Chairwoman. Laura Chambers, a former Airbnb, PayPal, and eBay executive, replaced her as the interim CEO for the remainder of the year. This leadership change was part of its refined vision and product strategy for the future. The planned strategy overhaul is now underway with around 60 job cuts.

First reported by Bloomberg, Mozilla’s latest layoffs primarily affect the product development organization. In a statement, the company said that this job cut will allow it to focus on areas where it has the greatest chance of success. “We intend to re-prioritize resources against products like Firefox Mobile, where there’s a significant opportunity to grow and establish a better model for the industry,” Mozilla said.

An internal memo obtained by TechCrunch further revealed that Mozilla is shutting down Hubs, a 3D virtual platform launched in 2018. The company blamed an unfavorable shift in demand for these kinds of products since early 2023 for its closure. Additionally, it plans to scale back investment in a bunch of products, including mozilla.social, a decentralized social media platform powered by Mastodon.

Introduced in 2023 amid chaos at X (formerly Twitter), Mozilla wanted to shape the future of social media with the new platform. The firm invested big in this idea but things didn’t pan out as intended. “It was a noble idea but one we struggled to execute,” Mozilla said in the memo. It is now reducing resources dedicated to the platform. Mozilla is also scaling back investments in VPN, Relay, and Online Footprint Scrubber.

Mozilla will focus on enhancing its AI offerings

With generative AI finding its way into all sorts of tech products lately, Mozilla will focus on enhancing its AI offerings. It will bring “trustworthy AI” into its Firefox browser, while housing teams working on Pocket, Content, and AI/ML together with the Firefox Organization. The company plans to share more details on the specific organizational changes later. This strategy overhaul from Mozilla doesn’t affect MDN, Ads, or Fakespot.


[ad_2]
Source link
1...424425426...1,478Page 425 of 1,478