Agregátor RSS

How AI Is Transforming IAM and Identity Security

The Hacker News - 15 Listopad, 2024 - 11:30
In recent years, artificial intelligence (AI) has begun revolutionizing Identity Access Management (IAM), reshaping how cybersecurity is approached in this crucial field. Leveraging AI in IAM is about tapping into its analytical capabilities to monitor access patterns and identify anomalies that could signal a potential security breach. The focus has expanded beyond merely managing human The Hacker Newshttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

Jak poctivé jsou e-shopy na Black Friday? Alza jde příkladem, slevy špatně uvádí Notino

Živě.cz - 15 Listopad, 2024 - 10:45
Listopad bude i letos patřit slevovému šílenství s názvem Black Friday. Původně jednodenní akci, která tradičně připadá na čtvrtý listopadový pátek, e-shopy prodlužují na celý měsíc, a pomalu tak zákazníky lákají na výhodnější předvánoční nákupy. Loni poprvé na obchodníky dopadla směrnice Evropské ...
Kategorie: IT News

Getting started with Google Password Manager

Computerworld.com [Hacking News] - 15 Listopad, 2024 - 10:45

If you’re still trying to remember all of your passwords and then type ’em into sites by hand, let me tell you: You’re doing it wrong.

With all the credentials we have to keep track of these days, there’s just no way the human brain can handle the task of storing the specifics — at least, not if you’re using complex, unique passwords that aren’t repeated (or almost repeated, even) from one site to the next. That’s where a password manager comes into play: It securely stores all your sign-in info for you and then fills it in as needed.

While there’s a case to be made for leaning on a dedicated app for that purpose (for reasons we’ll discuss further in a moment), Google has its own password management system built right into Chrome — and also now integrated directly into Android, at the operating system level. And it’s far better to rely on that than to use nothing at all.

Google Password Manager 101

First things first: You shouldn’t have to do anything to turn the Google Password Manager on. The system, once considered part of Google’s Smart Lock feature, works across Android, iOS, ChromeOS, and any other desktop platform where you’re signed into Chrome — and it’s typically activated by default in all of those places.

You’ll see the Password Manager’s prompts for credential-saving pop up anytime you enter your username and password into a site within the Chrome browser. The service will also offer to create complex new passwords for you when you’re signing up for something new. And whenever you return to a site where your credentials have been stored, Smart Lock will automatically fill them in for you — or, when more than one sign-in is associated with a single site, it’ll provide you with the option to pick the account you want to use.

The system is able to sign you into Android apps automatically, too, though it works somewhat sporadically — and you never quite know when it’ll be present. To use Google Password Manager in that way, you’ll need to search your Android device’s system settings for autofill, then:

  1. Tap “Autofill service from Google,” tap that same option once more, and confirm that the system is on and active.
  2. Return to that same settings search for autofill, tap “Preferred service,” and ensure that “Google” is both active and set to be the preferred service on that screen.

Google Password Manager can also sign you into both websites and apps across iOS, though on that front, you’ll need to manually enable the system by visiting the Passwords section of the iOS Settings app, selecting “Autofill” followed by “Passwords” and “Chrome,” and then turning on the “Autofill” option within that area.

Adjusting your Password Manager setup

If you ever want to look through and edit your stored passwords or adjust your Google Password Manager settings, the easiest thing is to sign into the Google Password Manager web interface at passwords.google.com — in any web browser, on any device you’re using.

There, you can view, edit, or delete any of your saved passwords as well as see and act on any alerts regarding possible security issues with your credentials.

You can also adjust your Google Password Manager preferences by clicking the gear icon in the upper-right corner of that page. It’s worth peeking in there once in a while, as you may find some options that are off by default and advisable to activate — like proactive alerts anytime a password you’ve saved is found to be compromised and on-device encryption for extra protection of any new passwords you save along the way.

That’s also where you can go to export all of your passwords for use in another service, if such a need ever arises.

The Google Password Manager web settings section has a host of important options — some of which are disabled by default.

JR Raphael / IDG

Speaking of which, if you do at some point decide to use a standalone password manager — and we’ll dive into that subject further next — you’ll want to be sure to disable the “Offer to save passwords” and “Auto sign-in” options here to effectively turn Google Password Manager off and keep yourself from seeing confusingly overlapping prompts every time you try to sign in somewhere.

You’ll also want to revisit the related settings on any Android and/or iOS devices you’re using to be sure the new password manager is set to take the place of Google Password Manager in all the appropriate areas.

Google Password Manager vs. the competition

So why is it more advisable to use a dedicated password manager instead of Google Password Manager? Well, a few reasons:

First, dedicated password managers provide broader and more consistent support for storing and filling in passwords across the full spectrum of apps on both your phone and your computer — something most of us need to do quite regularly, especially in a work context. You don’t want to have to go manually look up a password and then copy and paste it over every time you sign into something outside of your browser, and with Google Password Manager, that’s frequently what you end up having to do.

Beyond that, dedicated password managers work seamlessly in any browser you’re using, on any device, instead of being closely connected only to Chrome.

They also tend to come with stronger and more explicit security assurances, and they often offer additional features such as the ability to share your passwords with team members or even external clients (with or without allowing the person to actually see the password in question). They frequently include other useful elements beyond just basic password storage, too, including the ability to securely store different types of notes and documents.

I maintain a collection of recommendations for the best password manager on Android, and my top choice right now is 1Password — which costs $36 a year for an individual subscription, $60 a year for a family membership that includes up to five people, $239-a-year Teams Starter Pack that allows up to 10 company users, or $96 per company user per year. And while my recommendation is technically Android-specific, I take into account the experience the service offers across all platforms, since most of us work across multiple device types. 1Password works equally well on the desktop front as well as on iOS.

If you aren’t going to take the time to mess with a dedicated password manager, though, Google’s built-in system is absolutely the next best thing. And now you know exactly how to use it.

This article was originally published in May 2020 and updated in November 2024.

Kategorie: Hacking & Security

OpenMP API 6.0

AbcLinuxu [zprávičky] - 15 Listopad, 2024 - 10:38
OpenMP (Open Multi-Processing, Wikipedie) ARB (Architecture Review Board) vydal specifikaci OpenMP API (Application Programming Interface) 6.0 pro paralelní programování. Ke stažení PDF API (964 stránek) a PDF Examples (631 stránek).
Kategorie: GNU/Linux & BSD

AMD: Při použití FSR / XeSS je Strix Point o 75 % rychlejší než Lunar Lake

CD-R server - 15 Listopad, 2024 - 10:00
AMD zveřejnila výkonnostní srovnání aktuální generace mobilních procesorů pro ultrathin platformy, které naměřila s technologiemi jako FSR, XeSS a frame-generation…
Kategorie: IT News

Je k něčemu dobrý antivirus v mobilu? Pomůže, ale jinak, než si myslíte. Android i iOS mají vlastní ochranu

Zive.cz - bezpečnost - 15 Listopad, 2024 - 09:45
** Opravdu potřebujete antivirus v mobilu? ** Android i iOS mají zabudované základní ochrany ** Mobilní antiviry plní trochu jinou funkci, než na desktopu...
Kategorie: Hacking & Security

Je k něčemu dobrý antivirus v mobilu? Pomůže, ale jinak, než si myslíte. Android i iOS mají vlastní ochranu

Živě.cz - 15 Listopad, 2024 - 09:45
** Opravdu potřebujete antivirus v mobilu? ** Android i iOS mají zabudované základní ochrany ** Mobilní antiviry plní trochu jinou funkci, než na desktopu...
Kategorie: IT News

Kde vytisknout kalendář? Srovnali jsme šest českých fotolabů a rozdíly našli hned na začátku

Živě.cz - 15 Listopad, 2024 - 08:45
Kvalita tisku, gramáž papíru, webová aplikace – to jsou parametry, které rozhodují o kvalitách fotolabů při tisku fotokalendářů. Před vánoční sezónou jsme otestovali šest firem, u kterých si kalendář můžete nechat vytisknout.
Kategorie: IT News

Detectron2 – hra na špióny

ROOT.cz - 15 Listopad, 2024 - 08:30
V předchozích dvou článcích jsem z knihovny Detectron2 využíval modely trénované na konkrétní datové sadě, což byla v mém případě Common Objects in Context. Co když ale chci hledat něco, co v té datové sadě není?
Kategorie: GNU/Linux & BSD

Je to jako jezdit po městě na solárním panelu. Elektrický skútr Lightfoot ujede až 90 kilometrů

Živě.cz - 15 Listopad, 2024 - 07:45
Solární skútr Lightfoot se pyšní nejen ekologickým provozem, ale i praktickým designem. Stroj s elektrickým pohonem umí díky dvěma solárním panelům získávat energii přímo ze slunce . Za projektem stojí americký startup Otherlab spolu s australským inženýrem Saulem Griffithem, a právě díky jejich ...
Kategorie: IT News

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

The Hacker News - 15 Listopad, 2024 - 07:40
Cybersecurity researchers have disclosed a high-severity security flaw in the PostgreSQL open-source database system that could allow unprivileged users to alter environment variables, and potentially lead to code execution or information disclosure. The vulnerability, tracked as CVE-2024-10979, carries a CVSS score of 8.8. Environment variables are user-defined values that can allow a program
Kategorie: Hacking & Security

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

The Hacker News - 15 Listopad, 2024 - 07:40
Cybersecurity researchers have disclosed a high-severity security flaw in the PostgreSQL open-source database system that could allow unprivileged users to alter environment variables, and potentially lead to code execution or information disclosure. The vulnerability, tracked as CVE-2024-10979, carries a CVSS score of 8.8. Environment variables are user-defined values that can allow a program Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

(Ex)zaměstnanci arizonské TSMC ji žalují za protiamerickou diskriminaci

CD-R server - 15 Listopad, 2024 - 07:40
TSMC, která postavila továrnu ve Spojených státech amerických, nyní čelí žalobě tamních pracovníků za údajnou diskriminaci…
Kategorie: IT News

Microsoft Power Pages misconfigurations exposing sensitive data

The Register - Anti-Virus - 15 Listopad, 2024 - 07:32
NHS supplier that leaked employee info fell victim to fiddly access controls that can leave databases dangling online

Private businesses and public-sector organizations are unwittingly exposing millions of people's sensitive information to the public internet because they misconfigure Microsoft’s Power Pages website creation program.…

Kategorie: Viry a Červi

Hry zadarmo, nebo se slevou: Výprodej tuzemských her, dva balíky pro stratégy a kolekce Castlevanie zdarma

Živě.cz - 15 Listopad, 2024 - 07:10
Na všech herních platformách je každou chvíli nějaká slevová akce. Každý týden proto vybíráme ty nejatraktivnější, které by vám neměly uniknout. Pokud chcete získat hry zdarma nebo s výhodnou slevou, podívejte se na aktuální přehled akcí!
Kategorie: IT News

Bitfinex Hacker Sentenced to 5 Years, Guilty of Laundering $10.5 Billion in Bitcoin

The Hacker News - 15 Listopad, 2024 - 06:30
Ilya Lichtenstein, who pleaded guilty to the 2016 hack of cryptocurrency stock exchange Bitfinex, has been sentenced to five years in prison, the U.S. Department of Justice (DoJ) announced Thursday. Lichtenstein was charged for his involvement in a money laundering scheme that led to the theft of nearly 120,000 bitcoins (valued at over $10.5 billion at current prices) from the crypto exchange.
Kategorie: Hacking & Security

Bitfinex Hacker Sentenced to 5 Years, Guilty of Laundering $10.5 Billion in Bitcoin

The Hacker News - 15 Listopad, 2024 - 06:30
Ilya Lichtenstein, who pleaded guilty to the 2016 hack of cryptocurrency stock exchange Bitfinex, has been sentenced to five years in prison, the U.S. Department of Justice (DoJ) announced Thursday. Lichtenstein was charged for his involvement in a money laundering scheme that led to the theft of nearly 120,000 bitcoins (valued at over $10.5 billion at current prices) from the crypto exchange. Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

CISA Flags Two Actively Exploited Palo Alto Flaws; New RCE Attack Confirmed

The Hacker News - 15 Listopad, 2024 - 06:04
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday warned that two more flaws impacting the Palo Alto Networks Expedition software have come under active exploitation in the wild. To that end, it has added the vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the necessary updates
Kategorie: Hacking & Security

CISA Flags Two Actively Exploited Palo Alto Flaws; New RCE Attack Confirmed

The Hacker News - 15 Listopad, 2024 - 06:04
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday warned that two more flaws impacting the Palo Alto Networks Expedition software have come under active exploitation in the wild. To that end, it has added the vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the necessary updates Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

PCs with NPUs tweaked for AI now account for one of every five PCs shipped, says Canalys

Computerworld.com [Hacking News] - 15 Listopad, 2024 - 02:38

One out of every five PCs shipped in the third quarter of 2024, a total of 13.3 million units, was a PC with a neural processing unit (NPU) fine-tuned for generative AI (genAI) development, according to data published Wednesday by analyst firm Canalys.

It is anticipating a rapid rise in shipments of these AI-capable PCs, surging to 60% of units shipped by 2027, with a strong focus on the commercial sector.

Such machines typically house dedicated chipsets, including AMD’s XDNA, Apple’s Neural Engine, Intel’s AI Boost, and Qualcomm’s Hexagon, Canalys said in a statement.

“Copilot+ PCs equipped with Snapdragon X series chips enjoyed their first full quarter of availability, while AMD brought Ryzen AI 300 products to the market, and Intel officially launched its Lunar Lake series,” said Ishan Dutt, principal analyst at Canalys. “However, both x86 chipset vendors are still awaiting Copilot+ PC support for their offerings from Microsoft, which is expected to arrive [in November].”  

Dutt added that there is still resistance to purchasing AI PCs from both key end-user companies and channel players. 

“This is especially true for more premium offerings such as Copilot+ PCs, which Microsoft requires to have at least 40 NPU TOPS [trillion operations per second], alongside other hardware specifications,” Dutt said. “A November poll of channel partners revealed that 31% do not plan to sell Copilot+ PCs in 2025, while a further 34% expect such devices to account for less than 10% of their PC sales next year.”

Canalys labels the machines as “AI-capable PCs,” which is baffling, given that AI has been around for many decades and can — and has — run on all manner of PC. Someone accessing data from an LLM wouldn’t need that level of horsepower. That would only be needed for engineers and LLM developers creating the data-intensive systems.

But such PCs wouldn’t necessarily make sense for most of those LLM developers, said George Sidman, CEO of security firm TrustWrx. Most developers writing LLM applications at that level would be accessing high-end specialized servers, Sidman said. 

“The PC has very little role. You would be running this in a large data center. These things are blocks long,” Sidman said. “You have got to look at the real world issues. With a huge multi-petabyte system behind it, well, you need that for the LLM to be effective.”

Canalys disagreed. It said in its report, “With the use of AI models set to increase exponentially, associated costs to organizations from accessing cloud resources will ramp up significantly. Moving some workloads to AI-capable PCs will help mitigate this, and allow businesses to optimize their use of AI tools according to their budgets.”

Regardless, would such souped-up PCs deliver better overall performance? Yes, Sidman said, but the better question is whether the typical business user would likely notice the difference, given the speeds that exist today in routine business desktops. “Will it improve some performance on the PC? Probably, but it won’t get them anything concrete,” Sidman said.

Kategorie: Hacking & Security
Syndikovat obsah