Apple iPad (2021) review: Another modest update

Apple says the basic iPad is its most popular tablet. And why not? Back in 2017, the company introduced its cheapest-ever iPad as a budget option for schools or people who don’t need top-of-the-line specs. This device has always used hardware that’s a few years old — but Apple’s chips are so powerful that this hasn’t been an issue. Now in its ninth generation, though, the form factor is starting to feel stale; it’s virtually unchanged from the iPad Air that Apple released back in 2013. Then again, at this price who cares?

It’s not a tablet meant for early adopters like me. It’s for those who want a fast, lightweight tablet with a nice display and tons of apps, without having to spend too much or consider whether a device like the iPad Pro is the future of computing. As such, there are just a few basic questions I want to answer with this review. If you have an old iPad, what’s new and better about this one? And if you don’t have an iPad, is this the one to buy?

What’s new

To make that evaluation, let’s recap what’s new about the ninth-gen iPad. The processor powering it is Apple’s A13 Bionic chip, which first appeared in inside the iPhone 11 from 2019. It’s one year newer than the A12, which powered last year’s iPad, and it’s faster and more efficient than its predecessor. Naturally, it’s slower than the newer chips powering the iPad Air and the just-updated iPad mini, but it still delivers more than enough horsepower for a $330 tablet.

I didn’t experience any noticeable slowdowns, whether I was multitasking between Slack, writing this review in Google Docs, juggling various tabs in Safari or playing Apple Arcade games. Since this iPad has less RAM than the iPad Pro I use as my daily driver, I noticed that apps needed to refresh their content more frequently when I was heavily multitasking. But everything was quick to load up and I was back on my way again in no time.

For most people’s “standard iPad” use cases — browsing the web, editing photos, playing games, watching movies, messaging, drawing or taking notes with the Apple Pencil, writing emails or working on documents with the Smart Keyboard folio — the A13 Bionic is more than powerful enough. In fact, in our review of last year’s iPad, we found the device capable of easily transcoding and exporting 4K video into 1080p clips. It wasn’t as fast as the iPad Pro, but it was still faster than we anticipated. The A13 will only help if you’re the kind of person who likes to push their hardware.

Another new thing about the 2021 iPad is you get double the storage for the same amount of money. That means the $329 iPad has 64GB of storage this year, while the $479 comes with a healthy 256GB. As usual, you can also add LTE connectivity to these devices for an additional $130. (I reviewed the 256GB model with LTE, which costs $609.) This change is easy to evaluate: More storage is better, and it was sorely needed, particularly on the base model. 64GB should be enough for most people, but if you want to load up the iPad with games and save a lot of movies and photos to local storage, spring for the 256GB model.

Apple iPad (2021) review photos
Nathan Ingraham / Engadget

The iPad’s display is essentially unchanged from the prior two models. It’s a 10.2-inch touchscreen with 2,160-by-1,620 pixel resolution. There is one change to the screen, though: It has Apple’s True Tone technology for the first time, which automatically adjusts the color temperature based on the ambient light in the room around you. Apple has offered this feature on more expensive iPads and all of its iPhones for years now, so it’s nice to see it finally in use at the lower end.

The display otherwise looks good whether you’re watching videos, playing games or browsing the web. It’s not nearly as good as the screens on the other iPads that Apple sells, though. I’m used to my iPad Pro screen, which is laminated directly to the front glass and has a 120Hz refresh rate with support for the wide P3 color gamut. But, after just sitting down and using the new iPad, I mostly didn’t think about these things. For a $330 device, it’s perfectly usable; pleasant, even. I did notice the “air gap” on the new iPad that comes from not having its display bonded to the glass, but I can accept that as a cost-cutting measure.

Finally, Apple put a new front-facing camera on the new iPad. In a somewhat surprising move, it’s the same one used on the iPad Pro (minus all the depth sensors and extra hardware needed for Face ID). It’s also identical to the one inside the new iPad mini. It’s a 12-megapixel shooter with an extremely wide field of view. That wide angle enables a feature Apple calls “Center Stage.” When you’re on a FaceTime call, the camera automatically crops in around you, rather than show the full 122-degree field of view. But since the camera has all that space to work with, it can follow you as you move around the frame. It’s an interesting feature, though usually I’m stationary during video calls. It does do a decent job of making up for the fact that the iPad’s front camera is off-center when you’re using the iPad in landscape mode, though.

I imagine Center Stage is something that will feel handy once you start to use it regularly, and I’m generally glad to see that Apple seems to have recognized that the iPad needed a better front camera. The 1.2-megapixel FaceTime camera on older iPads just doesn’t cut it in this current moment where we’re all constantly on video calls.

What’s old

Apple iPad (2021) review photos
Nathan Ingraham / Engadget

Everything else about the new iPad remains unchanged. It’s the same size and weight as the last two models and features the same size screen. It has the same sizable bezels, 8-megapixel back camera, Lightning port for charging (not USB-C) and a home button with Touch ID built in. It works with the first-generation Apple Pencil (sold separately for $99), which Apple has offered since late 2015, plus the Smart Keyboard folio ($159) that Apple built for the 10.5-inch iPad Pro back in 2017. There are still two speakers at the bottom when you’re holding it in portrait orientation, which means audio still comes at you from one off-center spot when you’re watching a video. But, there’s a headphone jack!

This means it’s not the most exciting device for someone like me, but there are otherwise a lot of benefits to Apple keeping things unchanged. For one, someone replacing an iPad they bought a few years ago will be able to use the same chargers and accessories as before — something that’s particularly important for education programs and other institutions that bought iPads in bulk.

As always, Apple says the iPad’s battery lasts for 10 hours of browsing the web or watching videos over WiFi. I got a little less than that when using the iPad and its keyboard for a full day of work, but the iPad far surpassed that estimate when I was watching videos. I got closer to 14 hours before the battery finally kicked it. Naturally, you’ll enjoy less runtime when doing more intensive tasks like gaming.

Living with iPadOS 15

Apple iPad (2021) review photos
Nathan Ingraham / Engadget

Despite the ho-hum design, the user experience felt fresh, thanks largely to iPadOS 15. I’ve been using the updated software in beta since the summer, and I’m glad to say that the final release is solid. Apple addressed the biggest problems I had with iPadOS 15 (some illogical design changes to Safari), and many of the changes make the iPad experience significantly better.

Quick Notes is a great feature for Apple Pencil users and makes the iPad a much better note-taking device. Obviously, it’s handy to be able to quickly summon a new space to scribble in, but the fact that Notes recognizes when you’re on a website or specific Map location and lets you save them to the note is particularly useful.

Now that Safari has restored a traditional tab view instead of the cramped compact view from iPadOS 15 betas, I can appreciate some of the other changes this year to the browser. Tab Groups are a convenient way to organize things when you want to separate out what you’re browsing by category; I often use it to keep research for stories all in one place. And being able to find links that were shared with me through the Messages app is handy, too.

The variety of new multitasking gestures took a little getting used to, but they make it easier to set up various spaces with the right combination of apps for what you’re trying to do. The iPad’s 10.2-inch screen is almost too small for doing much in multitasking mode, but it’s still useful to have a bunch of my most-used apps a swipe aways in Slide Over. And the new “shelf” that appears when you launch an app to show you other spaces the app is running in is another smart addition I’ve been using a lot.

Apple iPad (2021) review photos
Nathan Ingraham / Engadget

Other new changes are taking me longer to set up the way I’d like. The notification summary feature, which lets you set up a time for notifications from specific apps to be delivered, is a clever idea in theory. But I haven’t yet figured out which apps I want to relegate to the summary and which ones I’d rather show up immediately. Similarly, the new Focus features let you set up multiple do not disturb scenarios, each of which can have its own schedule, apps or people allowed or blocked and home screens that are hidden or active. It’s extremely flexible, but I haven’t yet figured out how to make the most of it.

The learning curve aside, iPadOS 15 is a solid release, and it runs well on the new iPad. If you buy this tablet now, it should receive similar updates for years to come, which will go a long way toward keeping it fresh even though it was never a cutting-edge device.

Wrap-up

Apple iPad (2021) review photos
Nathan Ingraham / Engadget

Coming from the iPad Pro, I was pleasantly surprised at how capable the new iPad is. I’ve gotten used to using the Magic Keyboard and its trackpad for work, so I found the new iPad’s $159 Smart Keyboard folio lacking. Between that and the smaller screen, it’s not my first choice for tasks that require me to keep an eye on multiple things simultaneously.

But it was a great device for drafting this review plus all the “iPad things” I want to do when I’m not working. I found myself using the iPad handheld, with its keyboard tucked away, more often than I expected. Being able to quickly flip back the keyboard t and use the iPad with two hands and then switch to typing when I wanted to bang out an email or reply to a message became a pretty common couch workflow.

Overall, I could do just about everything I can with my iPad Pro on the new iPad. There are a few slight changes and compromises here — but for the consumers Apple is targeting, those things might be moot. The iPad remains a very good tablet at a fair price. If you want something more modern, I don’t blame you, and would instead point you toward the iPad Air, which hits a sweet spot of performance, features and price.

If you’ve bought an iPad in the last two years, there’s no need to upgrade — but people with one older than the fall 2019 iPad will find some significant improvements here. If you’ve never bought one before, the new iPad delivers a surprisingly deep experience, despite its aging design.



Source: Engadget – Apple iPad (2021) review: Another modest update

Somehow, iOS 15 Made Siri Dumber

Siri is not known for being the smartest digital assistant on the block, but at the least, it could do basic functions like checking your voicemails. However, with the public release of iOS 15, it seems that Siri has forgotten how to do some basic tasks—to the detriment of those who may rely on Siri as an…

Read more…



Source: Gizmodo – Somehow, iOS 15 Made Siri Dumber

The 10 ‘Seinfeld’ Episodes to Watch If You’ve Never Seen It Before (Not That There’s Anything Wrong With That)

More than 30 years ago, Larry David and Jerry Seinfeld brought an impressive innovation to the TV sitcom: Protagonists who are uniformly terrible people.

Sure, Married… with Children’s deplorable Bundys had been on air for a couple of years, but that series was on Fox—then a small upstart network—and an explicit…

Read more…



Source: LifeHacker – The 10 ‘Seinfeld’ Episodes to Watch If You’ve Never Seen It Before (Not That There’s Anything Wrong With That)

Nintendo Forcefully Shuts Down 'False' 4K Switch Rumors Following Detailed Report

Nintendo Forcefully Shuts Down 'False' 4K Switch Rumors Following Detailed Report
In a recent Twitter post, Nintendo sought to make one thing abundantly clear to investors and the public large—it has no current plans to launch a Switch console beyond the upcoming Switch OLED refresh, and that definitely includes an oft-rumored 4K model with upgraded hardware. It is just not in the cards, if Nintendo is to be believed.

For

Source: Hot Hardware – Nintendo Forcefully Shuts Down ‘False’ 4K Switch Rumors Following Detailed Report

Alphabet Gives Some Loon Patents To SoftBank, Open Sources Flight Data and Makes Patent Non-assertion Pledge

TechCrunch reports: Alphabet’s Loon was a stratospheric moonshot that saw the company fly high-altitude balloons to provide cellular network coverage to target areas. The project broke a lot of new ground, including developing technology that enabled balloons to navigate autonomously and stay in one area for long stretches of time, but ultimately came to an end. Now, Alphabet is divvying up the Loon assets, many of which are being either made available to others in the industry for free — or handed over to key partners and strategic investors. SoftBank is one company that walks away with some intellectual property; the Japanese telecommunication giant gets around 200 of Loon’s patents related to stratospheric communications, service, operations and aircraft, which it says it will put to use developing its own High Altitude Platform Stations (HAPS) business.

SoftBank was an erstwhile partner of Loon’s, having founded the ‘HAPS Alliance’ to further the industry. SoftBank’s own HAPS business focused on autonomous gliders, but it adapted its communications payloads to work on Loon’s balloons, too. SoftBank is also an investor in Loon, having put $125 million in the Alphabet company in 2019. The other company to get a windfall of sorts out of Loon’s closure is Raven, another partner and a company that focuses on the manufacture of the high altitude balloons that the Alphabet moonshot operated. It picks up patents related specifically to balloon manufacturing.

Read more of this story at Slashdot.



Source: Slashdot – Alphabet Gives Some Loon Patents To SoftBank, Open Sources Flight Data and Makes Patent Non-assertion Pledge

Xbox Cloud Gaming goes live in Australia, Japan, Brazil and Mexico

In the same week it began public tests of Xbox Cloud Gaming on consoles, Microsoft is expanding the project formerly known as xCloud in other ways. Cloud Gaming is going live in Brazil and Mexico today, and in Australia and Japan on October 1st.

The company started testing xCloud in those four nations last November. It seems the preview proved popular, as players in Brazil packed out the Cloud Gaming servers even before Microsoft formally announced the test.

The expansion means that more than a billion people in 26 countries now have access to Xbox Cloud Gaming. All they need is a Game Pass Ultimate subscription, a compatible device (like a computer, smartphone or tablet) and a strong-enough internet connection. Folks don’t necessarily need a controller, as there are a bunch of games that have touch controls.

Microsoft made the announcement at Tokyo Game Show, where it had some other news up its sleeve. Action JRPG Scarlet Nexus just landed on Game Pass, for one thing. You can play it on consoles, PC and Cloud Gaming with touch controls.

The company is also localizing Starfield and Redfall, two major upcoming first-party games, for Japan. The Starfield localization is the biggest translation project Bethesda has ever tackled, as it involves more than 300 actors and north of 150,000 lines of dialogue.



Source: Engadget – Xbox Cloud Gaming goes live in Australia, Japan, Brazil and Mexico

It Turns Out The Nintendo Switch’s Fall Lineup Actually Looks Pretty Strong

“Too many games” season is officially upon us. I’ve been spending more time than usual looking at the video game release calendar lately and marveling at how many of them I’ll be playing on Switch. It’s rarely a bad (or normal) time to be a Nintendo fan, but fall 2021 is shaping up to be a lot better than I had…

Read more…



Source: Kotaku – It Turns Out The Nintendo Switch’s Fall Lineup Actually Looks Pretty Strong

Kingston DataTraveler Max UFD Review: NVMe Performance in a USB Thumb Drive

Rapid advancements in flash technology and continued improvements in high-speed interfaces have driven the growth of small, bus-powered portable SSDs. Kingston introduced the DataTraveler Max in August 2021 as a USB-C flash drive capable (UFD) of hitting 1GBps speeds. Its uniqueness lies in the form-factor. In fact, it is the first device in a thumb drive form-factor to hit such performance numbers. These numbers are achieved while keeping the UFD light enough to sport an integrated USB-C male connector. Read on for our analysis of the drive’s performance and a detailed look at the technology enabling this unique product.



Source: AnandTech – Kingston DataTraveler Max UFD Review: NVMe Performance in a USB Thumb Drive

11 Netflix Settings Everyone Should Know About

Love watching Netflix for hours on end? There’s a lot more you can do with it if you spend just a few quick minutes in the settings section. You can make your next binge watching weekend better by customizing subtitles, home screen previews, download settings, and more. Here are 11 of our favorites.

Read more…



Source: LifeHacker – 11 Netflix Settings Everyone Should Know About

Linux Achieves 5.1M IOPS Per-Core With AMD Zen 3 + Intel Optane

Linux kernel developers have been working tirelessly to squeeze more performance out of IO_uring and the block / I/O code in general. IO_uring lead developer Jens Axboe who also serves as the Linux block subsystem’s maintainer (among other roles and major contributions over the years) has used his system as a baseline for evaluating such kernel improvements. He’s now moved to using AMD Zen 3 while sticking to Intel Optane storage and is seeing a mighty speed boost out of AMD’s latest processors…

Source: Phoronix – Linux Achieves 5.1M IOPS Per-Core With AMD Zen 3 + Intel Optane

Qualcomm and Why it May Be Time for Cities to Get a CTO

Flying a drone at dusk in the city

This week, Qualcomm has their big Smart Cities event in San Diego.  Qualcomm is one of the vendors driving the concept of Smart Cities into the market.  The promise of this effort to modernize and automate cities is the ability to do more with less.  Using security cameras to make up for police staffing shortages, sensors to ensure that water isn’t wasted, identifying fires early enough to stop them, reducing traffic and global warming due to inefficient streetlights, and eliminating most forms of waste.  

The difficulty, as Qualcomm’s CEO Cristiano Amon pointed out, is that while mayors may have operational skills, they typically are not technology experts. Cities often make massive errors regarding the technology they purchase by relying too much on the vendor who pitched the idea.  Cristiano argued that while Qualcomm is often pinch-hitting as a virtual CTO for the cities it is working with, having a dedicated person in this role could better assure independence and better assure things like continuity and interoperability between the technologies that are deployed.  

Given we are moving into an age of autonomous machines (cars, robots, and drones), Quantum AIs that can handle complex problems that current computers aren’t capable of handling, and even personal flying vehicles, the need for Smart Cities has never been greater.  But a lack of competence at the top in the form of a qualified CTO could lead to massive technological disasters that not only don’t help but could make things worse.  

The case for a Smart City CTO

The CTO position is relatively new in corporate governance.  It was created as a CEO resource so that the related company could have a technology vision consistent with the CEO’s operational vision.  The CEO figures out what strategy the company should follow, and the CTO then assesses how technology could best assist in the successful execution of that strategy.   

Care should be taken to assure the CTO is competent; having either worked for or been a CTO in the past in private industry would be a massive advantage because the CTO job in cities is relatively rare.  Once hired, the CTO would look at the short- and long-term goals for the city and then draft a proposal for the kind of technology needed for the city to meet those goals successfully.  

Qualcomm would be one of the safer vendor partners for an effort like this, given they work in the area but don’t provide complete solutions to it, instead of supplying technology to partners who, in turn, provide that complete solution.  They would be in an excellent position to discuss what other cities are doing, best practices, and even identify candidates for the CTO position.  

Two areas they’ll need to develop quickly are implementing an IoT sensor network best and preparing for quantum tools.  The first is a critical aspect of any Smart City, but if you don’t approach this problem correctly, you’ll overspend for a sensor network that may be obsolete when you complete it.  Quantum tools stand out as superior for managing complex problems like water management, stop light sequencing, and the most effective way to deploy your police force.  

Quantum AIs are expected to revolutionize logistics, allow cities to operate with far fewer people offsetting today’s staff shortages, and be instrumental in assuring the best response possible to a natural or artificial disaster.  

One exciting implementation is for trash pickup, where the trucks are only sent to homes that need their trash picked up and aren’t just making the rounds regardless of the need.  If this were coupled with an effort to reduce or eliminate waste and increase recycling, this would not only lower cost; it would reduce the cities’ waste footprint and be better for the planet.  

Wrapping up:

We are moving to a period where cities will be deploying technology at an increasing pace to serve their citizens better and make up for endemic staff shortages.   A qualified CTO could substantially reduce the waste, missteps, and failed efforts that often surround Smart City programs.  While companies one step removed from complete solutions like Qualcomm can step in and pinch-hit, they won’t know the unique needs of the city as well as a dedicated and qualified CTO.   

Given these systems cost millions and can be very damaging to the image of the city and its governing body, if they fail, the cost of CTO to assure that doesn’t happen seems trivial.  I expect cities without CTOs will have multiple expensive mistakes, much like companies, before establishing that same role.  Learn from those companies, and if you are planning on moving to a Smart City concept, get a qualified CTO to determine the lowest-cost, most effective path. 



Source: TG Daily – Qualcomm and Why it May Be Time for Cities to Get a CTO

Please Don't Store These Things in Your Shed

There are lots of things that seem like they might belong in a shed or other outbuilding, but actually don’t, as moisture and temperature can affect things stored in uninsulated and non-climate controlled environments. Some sheds and garages are insulated, but rust, corrosion, and other types of damage can occur if…

Read more…



Source: LifeHacker – Please Don’t Store These Things in Your Shed

This Widespread iOS 15 Messages Bug Permanently Deletes Your Saved iPhone Photos

This Widespread iOS 15 Messages Bug Permanently Deletes Your Saved iPhone Photos
Attention fellow iPhone users, if you have any precious photos nestled inside text messaging threads, be careful not to delete those threads, even if you have saved those photos to your camera roll. Otherwise, you risk losing those pictures forever. The culprit is a weird bug in iOS 15 and/or iCloud, and as of the latest incremental beta update,

Source: Hot Hardware – This Widespread iOS 15 Messages Bug Permanently Deletes Your Saved iPhone Photos

‘Lower Decks’ mines the weirder corners of the Star Trek universe

The following contains minor spoilers for season two, episode eight of ‘Star Trek: Lower Decks.’

The subject of “canon” has come up a lot recently. Marvel’s What If…? is a show that plays around but still mostly adheres to it, while Star Wars Visions disregards it almost completely. Meanwhile, Star Trek: Lower Decks is a humorous show that wasn’t expected to follow canon and yet, the writers seem to have made it their mission to fill out the gaps in Star Trek continuity. And this might be the cartoon’s greatest strength.

CBS

The show’s willingness to reference past adventures is on full display this week, as the USS Cerritos is tasked with running drills to test crew efficiency. Seeing a Starfleet crew put through its paces is something we’ve seen many times before, though this time around it’s for a particularly non-Starfleet-like reason: Captain Freeman accidentally leaves our core four cast members behind when jetting off on a rescue mission. To be fair, the quartet of ensigns did forget to sign their magnet boots out, which would have let their senior officers know they weren’t on the ship. But still, it’s a screw-up we don’t often see on Star Trek.

In response, the entire crew is gathered in a cargo bay to be tested by a Pandronian instructor — a species never seen in any live-action Star Trek productions, but familiar to anyone who’s watched the 1973 animated series. Pandronians are colony creatures that can split into three pieces, something that was harder to create when special effects were far less sophisticated. Animation has fewer limitations, and Lower Decks has taken advantage of that plenty in its two seasons to showcase species like the Caitians, Ariolo and Kzinti.

CBS

Though it utilized many of the cast and crew of the original series, the canonized status of the animated Star Trek was always a nebulous thing, with some writers saying that episodes like “Yesteryear” were in continuity, but no real on-screen confirmation of the show’s place in the timeline. One of show creator Mike McMahan’s stipulations for Lower Decks was that it take place in-canon, and he’s used that status to cement the 1973 cartoon in as well.

However, Lower Decks also has plenty to offer live-action fans, and this week’s episode is heavy on the references, with the Cerritos crew taking on simulations with names like “Natural Selection,” “Chain of Command” and “Naked Time.” These aren’t just generic descriptions but also the names of episodes, and long-time fans will delight in seeing Mariner take on the Mirror Universe or Boimler face off against the Borg. We might be familiar with the scenarios, but seeing how these particular characters handle them adds a new twist.

CBS

While the whole drill plot might seem like a cheap way to pander to old-school fans, it’s also similar to how the military works in real life, with students often asked to study historical tactics and run tests based on real events. We’ve seen the holosuites used to recreate battles at the Alamo, Thermopylae and the Battle of Britain on Deep Space Nine, while Riker even used the holodeck to observe the Enterprise NX-01’s final mission. (And let’s not forget the time Troi had to kill Geordi to earn a promotion to commander.) From the beginning, Lower Decks has been a show that embraces Starfleet’s naval trappings more fully than we’ve ever seen, and putting the crew to the test here seems to be the logical endpoint of that.

But where Lower Decks shines brightest of all is when it chooses to glue the disparate parts of the Star Trek franchise together. The Star Trek universe is extremely weird and complex but, instead of rebooting the entire franchise (DC Comics) or throwing out huge swathes of past story (Star Wars), Star Trek has embraced the mess. The universe is weird, so it’s okay if everything doesn’t neatly fit together. It’s just funnier this way.



Source: Engadget – ‘Lower Decks’ mines the weirder corners of the Star Trek universe

New Galaxy S22 Ultra Case Renders Seemingly Confirm Samsung’s Big Flagship Redesign

New Galaxy S22 Ultra Case Renders Seemingly Confirm Samsung’s Big Flagship Redesign
Over the weekend, new renders leaked of Samsung’s upcoming Galaxy S22 Ultra flagship smartphone. The renders gave us our first look at a dramatic departure from the Galaxy S family with respect to design and showcased a look more akin to the stalled Galaxy Note series.
Now, upcoming third-party cases presented by frequent gadget leaker Ice

Source: Hot Hardware – New Galaxy S22 Ultra Case Renders Seemingly Confirm Samsung’s Big Flagship Redesign

PoC exploit released for Azure AD brute-force bug—here’s what to do

PoC exploit released for Azure AD brute-force bug—here’s what to do

Enlarge (credit: Michael Dziedzic)

A public proof-of-concept (PoC) exploit has been released for the Microsoft Azure Active Directory credentials brute-forcing flaw discovered by Secureworks and first reported by Ars. The exploit enables anyone to perform both username enumeration and password brute-forcing on vulnerable Azure servers. Although Microsoft had initially called the Autologon mechanism a “design” choice, it appears, the company is now working on a solution.

PoC script released on GitHub

Yesterday, a “password spraying” PoC exploit was published for the Azure Active Directory brute-forcing flaw on GitHub. The PowerShell script, just a little over 100 lines of code, is heavily based on previous work by Dr. Nestori Syynimaa, senior principal security researcher at Secureworks.

According to Secureworks’ Counter Threat Unit (CTU), exploiting the flaw, as in confirming users’ passwords via brute-forcing, is quite easy, as demonstrated by the PoC. But, organizations that use Conditional Access policies and multi-factor authentication (MFA) may benefit from blocking access to services via username/password authentication. “So, even when the threat actor is able to get [a] user’s password, they may not be [able to] use it to access the organisation’s data,” Syynimaa told Ars in an email interview.

Read 10 remaining paragraphs | Comments



Source: Ars Technica – PoC exploit released for Azure AD brute-force bug—here’s what to do

Manage CentOS Stream with Foreman

In December 2021, CentOS 8 will reach end of life and be replaced by CentOS Stream. One of the major changes between previous iterations of CentOS and CentOS Stream is the lack of minor versions. Centos Stream has adopted a continuous release cycle. From the beginning of this year, developers in the Foreman community started to see the benefits of earlier bug detection and patching that CentOS Stream offers as a result of the continuous releases. We no longer have to wait for the next release to take advantage of the latest changes and bugfixes.

Source: LXer – Manage CentOS Stream with Foreman