Developers Can't Seem To Stop Exposing Credentials in Publicly Accessible Code

Despite more than a decade of reminding, prodding, and downright nagging, a surprising number of developers still can’t bring themselves to keep their code free of credentials that provide the keys to their kingdoms to anyone who takes the time to look for them. From a report: The lapse stems from immature coding practices in which developers embed cryptographic keys, security tokens, passwords, and other forms of credentials directly into the source code they write. The credentials make it easy for the underlying program to access databases or cloud services necessary for it to work as intended. […]

The number of studies published since following the revelations underscored just how common the practice had been and remained in the years immediately following Uber’s cautionary tale. Sadly, the negligence continues even now. Researchers from security firm GitGuardian this week reported finding almost 4,000 unique secrets stashed inside a total of 450,000 projects submitted to PyPI, the official code repository for the Python programming language. Nearly 3,000 projects contained at least one unique secret. Many secrets were leaked more than once, bringing the total number of exposed secrets to almost 57,000.

Read more of this story at Slashdot.



Source: Slashdot – Developers Can’t Seem To Stop Exposing Credentials in Publicly Accessible Code

This Is What It Looks Like When A Massive Video Game Publisher Messes Up

This is Lars Wingefors, the CEO of Embracer, a Swedish holding company that owns multiple video game publishers, dozens of studios, and employs over 16,500 people. Or at least it used to. Embracer has been laying off hundreds, canceling projects, and closing studios as it reckons with deals that fell through,…

Read more…



Source: Kotaku – This Is What It Looks Like When A Massive Video Game Publisher Messes Up

AMD Threadripper Pro 7995WX 96-Core Obliterates Benchmark Records On Air Cooling

AMD Threadripper Pro 7995WX 96-Core Obliterates Benchmark Records On Air Cooling
AMD CPU overclocker Bill Alverson, who goes by the handle Sampson, set several CPU performance records on Wednesday with his overclocked Threadripper Pro 7995WX. The 96-core processor is based on AMD’s Genoa family, which also powers the regular Threadripper 7000 lineup and 4th Generation EPYC CPUs. These records were set with air cooling,

Source: Hot Hardware – AMD Threadripper Pro 7995WX 96-Core Obliterates Benchmark Records On Air Cooling

Poor Things Puts a Shocking and Fantastic Spin on a Classic Tale

At its core, Poor Things is the relatively simple story of a woman growing up and finding herself. However, in the hands of director Yorgos Lanthimos (The Lobster, The Favourite), it tells that tale in the most fantastical, imaginative, disturbing, and hilarious way possible. Words that, in fact, also describe the…

Read more…



Source: Gizmodo – Poor Things Puts a Shocking and Fantastic Spin on a Classic Tale

Gamers Scramble To Buy Steam Deck OLED But Are Met With Frustration

Gamers Scramble To Buy Steam Deck OLED But Are Met With Frustration
Please Valve, take my money and let me buy your Steam Deck OLED, thought numerous gamers as they try to get their hands on Valve’s newest release. With some headaches along the way, it appears unfortunately, that this is a a tall order currently. If you’re old enough to remember the great GPU shortage of the early 2020s (we hope you are),

Source: Hot Hardware – Gamers Scramble To Buy Steam Deck OLED But Are Met With Frustration

Lucid's Gravity electric SUV will have a max range of 440 miles

Lucid’s Gravity all-electric SUV has been on our radar for a while now, since originally being introduced back in 2022. Now we have more details, including pricing, availability and those all-important range metrics. First, the bad news. This thing likely won’t ship until 2025, as production doesn’t officially ramp up until late 2024, as reported by Sustainable Mobility Solutions (SAE).

We already knew some details surrounding the EV, including the roomy three-row interior, but now we have range data. Lucid CEO Peter Rawlinson promises a range of at least 440 miles, so it looks like it could inch further than that once the Gravity hits the assembly line. The company has stated in the past that this EV would boast a “greater electric range than any SUV on the market today.”

So let’s look at some metrics. According to Kelly Blue Book, the Gravity will easily exceed this promise, as the current top-range EV SUV is the Fisker Ocean, with a max driving range of 350 miles per charge. As a matter of fact, if Lucid’s forthcoming SUV truly gets 440 miles per charge, that’ll place it near the top of the list for any electric vehicle, SUV or not. The only competition will be another Lucid automobile, as the Air Grand Touring sedan gets 516 miles per charge, according to MotorTrend.

Like the Air line, the Gravity is built on a 900-volt electrical architecture that supports DC fast-charging. The company says the forthcoming EV can go from 0 to 60 in 3.5 seconds, via its dual-motor setup, and boasts a payload capacity of 1,500 pounds with the ability to tow a further 6,000 pounds.

Beyond metrics, Lucid also lifted the veil on the interior of the SUV. The Gravity will boast a 34-inch OLED main display and an optional lower display, with multi-tasking available between the two. In other words, you can throw navigation on one screen and the media player on the other. These displays won’t get in the way of the dash cluster and will even offer gaming applications in the future, according to Derek Jenkins, senior vice president of design and brand at Lucid.

The steering wheel includes two touch controllers inspired by the Apple TV remote, as minute thumb movements select items from the infotainment screen and adjust dashboard display elements. Of course, this is a three-row vehicle, so there’s plenty of room for friends and family, if you’re into that kind of thing. It seats up to seven people.

As previously mentioned, the price should be around $80,000, though things could change before these cars hit showrooms in 2025.

This article originally appeared on Engadget at https://www.engadget.com/lucids-gravity-electric-suv-will-have-a-max-range-of-440-miles-193859560.html?src=rss

Source: Engadget – Lucid’s Gravity electric SUV will have a max range of 440 miles

How to Install Uptime Kuma on Debian 12

In this tutorial, we are going to explain in step-by-step detail how to install Uptime Kuma on Debian 12.Uptime Kuma (or just Kuma) is an open-source monitoring tool used for monitoring services over HTTP, HTTPS, DNS, and other protocols. Uptime Kuma offers a variety of features such as multi-languages, multiple status pages, proxy support, etc.

Source: LXer – How to Install Uptime Kuma on Debian 12

Amazon's Echo Show 5 falls to a record low of $40 in a Black Friday deal

The Amazon Echo Show 5 smart display is on sale for $40 as part of an early Black Friday deal. This matches a record low price for the device and represents a savings of more than 50 percent, as the typical MSRP for the display is $90. The sale applies to various colorways, including white, charcoal and blue.

This discount is only for the device itself, so you’ll have to pay extra for accessories like a stand. The Echo Show 5 finds a lot of use as a smart home controller, so Amazon also sells bundles that ship with smart light bulbs, the Blink Mini security camera and an Alexa Emergency Assist subscription.

The Echo Show 5 easily made our list of the best smart displays in 2023 for a number of reasons. The diminutive 5.5-inch screen makes it easy to place just about anywhere in the home and allows it to double as a highly useful alarm clock. The ambient light sensor automatically adjusts the screen’s brightness so you can get some sleep and there’s a handy tap-to-snooze function. There’s even a sunrise alarm feature that slowly brightens the screen.

The smart home controls are handy if you have plenty of installed gadgets throughout the home. The Echo Show 5 is also a decent option for video calling, thanks to the integrated camera system. If the idea of an always-on smart display with a camera makes you feel a bit icky, it ships with a physical cover.

For those who balk at the relatively small 5.5-inch display size, Amazon is also selling the much larger Echo Show 10 for $160 as part of the same Black Friday deal. This represents a savings of $90.

Your Black Friday Shopping Guide: See all of Yahoo’s Black Friday coverage, here. Follow Engadget for Black Friday tech deals. Learn about Black Friday trends on In The Know. Hear from Autoblog’s experts on the best Black Friday deals for your car, garage, and home, and find Black Friday sales to shop on AOL, handpicked just for you.

This article originally appeared on Engadget at https://www.engadget.com/amazons-echo-show-5-falls-to-a-record-low-of-40-in-a-black-friday-deal-183059264.html?src=rss

Source: Engadget – Amazon’s Echo Show 5 falls to a record low of in a Black Friday deal

Prison phone company leaked 600K users’ data and didn’t notify them, FTC says

A telephone on a wall inside a prison.

Enlarge / A telephone in a prison. (credit: Getty Images | Image Source)

Prison phone company Global Tel*Link leaked the personal information of nearly 650,000 users and failed to notify most of the users that their personal data was exposed, the Federal Trade Commission said today. The company agreed to a settlement that requires it to change its security practices and offer free credit monitoring and identity protection to affected users, but the settlement doesn’t include a fine.

“Global Tel*Link and two of its subsidiaries failed to implement adequate security safeguards to protect personal information they collect from users of its services, which enabled bad actors to gain access to unencrypted personal information stored in the cloud and used for testing,” the FTC said.

Global Tel*Link has long been controversial because of the prices it charges for inmate-calling services. The company rebranded itself as ViaPath Technologies last year. The subsidiaries targeted in the FTC complaint are Telmate and TouchPay Holdings.

Read 13 remaining paragraphs | Comments



Source: Ars Technica – Prison phone company leaked 600K users’ data and didn’t notify them, FTC says

The Next iPhone Will Have an Easier Time Texting Android's Green Bubbles

Could it be? Is Apple finally relenting and letting Android users frolic in its walled garden? 9to5Mac reports that an Apple spokesperson has revealed that RCS support is on the docket for next year’s iPhone launch. That means more parity for Android users’ messages to iPhone wielders.

Read more…



Source: Gizmodo – The Next iPhone Will Have an Easier Time Texting Android’s Green Bubbles

Signal Reveals Its Operation Costs, Estimates $50 Million a Year In 2024

gaiageek writes: Of note, given the recent Slashdot article about Signal opening up to trying out usernames, is the $6 million annual cost of sending SMS messages for account verification, which certainly suggests that getting rid of phone number verification would be a significant cost-saving solution. Signal pays $14 million a year in infrastructure costs, for instance, including the price of servers, bandwidth, and storage. It uses about 20 petabytes per year of bandwidth, or 20 million gigabytes, to enable voice and video calling alone, which comes to $1.7 million a year. The biggest chunk of those infrastructure costs, fully $6 million annually, goes to telecom firms to pay for the SMS text messages Signal uses to send registration codes to verify new Signal accounts’ phone numbers.

Read more of this story at Slashdot.



Source: Slashdot – Signal Reveals Its Operation Costs, Estimates Million a Year In 2024

Apple iMac (2023) Review: One Foot in the Future and the Past

It’s been over two years since Apple released its all-in-one desktop after skipping the entire M2 generation of chips, leaving us wondering when the iMac would make its dramatic return. The iMac comes in seven fun colors, is powered by Apple’s fancy new M3, and even promises to make gaming on a Mac a thing.

Read more…



Source: Gizmodo – Apple iMac (2023) Review: One Foot in the Future and the Past

DOS_Deck Plays Retro PC Games Like Heretic In Your Browser With Full Controller Support

DOS_Deck Plays Retro PC Games Like Heretic In Your Browser With Full Controller Support
You hear it said all the time: one of the best reasons to own a Steam Deck is for emulating classic games. The Steam Deck is fundamentally a PC, but despite this, you’ll rarely hear anyone talk about playing classic PC games on it. The reason is simple: the Steam Deck’s primary controls are gamepad-based, and enjoying old PC games with a modern

Source: Hot Hardware – DOS_Deck Plays Retro PC Games Like Heretic In Your Browser With Full Controller Support

Google News is shutting down purchased magazine content, offering refunds

Google News is shutting down purchased magazine content, offering refunds

Enlarge (credit: Google / Ron Amadeo)

Google News is known to most people as a big pile of web links, but it actually hosts magazines, too. Before the days of the Internet, a “magazine” was a big bundle of paper full of articles you could get shipped to your door, sort of like if you printed out a website. For a time, you could pay cold, hard cash for a digital copy of a paper magazine through Google and then view that content through whatever the latest Google magazine/news app was.

Magazine content sales were shut down in 2020, though, and soon, Google’s magazine content will no longer be hosted online. The company announced on a support page that purchased content will be shut down starting December 18. You can see if you have purchased (or freebie) magazines at this link.

Let’s see if we can put on our “Google archeology” hats and figure out where this all came from. Google started selling magazines in 2012 with “Google Play Magazines.” You could buy individual magazine issues for around $8 or subscribe yearly for $11. These were all hosted by Google, with access available through the app and web. One year later, in 2013, Play Magazines was merged with another Google news app, Google Currents, to create Google Play Newsstand. Newsstand featured paid magazines and free website content. Google spent 2013–2016 rolling out purchasing support across more and more countries.

Read 4 remaining paragraphs | Comments



Source: Ars Technica – Google News is shutting down purchased magazine content, offering refunds

Amazon will start selling Hyundais through its website next year

Next year, Amazon will let you add a whole ass car to your shopping cart. The company announced today that it will launch vehicle sales in the US next year. The first cars available to purchase will be from Hyundai, as part of an Amazon partnership with the company, but more brands will presumably be added.

Buying a car on Amazon doesn’t seem to be super different from buying pretty much anything else on the website. According to an Amazon blog post, you’ll be able to search for vehicles in your area based on model, trim, color, and features. Once you’ve selected a car, you can choose to pick it up or have it delivered to a local dealership, and then check out using the same standard payment or financing options you normally use on the site. Do Prime members get free shipping? I sure hope so.

Hyundai is also building in Alexa into its cars starting in 2025 as part of its partnership with Amazon. This will let you ask Alexa to not only do the usual Alexa things like playing music and setting timers, but also ask for directions, traffic updates and weather reports, and control the car’s media player and navigation system.

This article originally appeared on Engadget at https://www.engadget.com/amazon-will-start-selling-hyundais-through-its-website-next-year-191128589.html?src=rss

Source: Engadget – Amazon will start selling Hyundais through its website next year

Kia's latest EV concepts go big on geometrics and cabin vibes

Kia’s concept EVs often get more than the usual amount of attention because it tends to incorporate a lot of the ideas in the final production models — with the EV9 electric SUV being a good example of that. With that in mind, the company just unveiled the Concept EV3 and Concept EV4 representing its “Opposites Unite” design philosophy, with an emphasis on interior vibes, geometric shapes and sustainable materials. 

The smallish crossover Concept EV3 looks more production-ready, and Kia says it “offers the technology, practicality and design of [our] flagship SUV, the EV9.” That may be true, but the EV3 carries a bold, futuristic design as well. Like the EV9 concept, it has distinct geometric patterns including octagonal wheel wells that flare out considerably from the body, and echoes those shapes in the side skirts and taillights. 

Kia's latest EV concepts emphasize 'cabin ambience,' geometric shapes
Kia

The windshield is pushed forward to open up interior space, while the glass roofline slopes front to back and appears to float thanks to the disconnected C pillar. “The unexpected treatment of volumes and graphics simultaneously interlock with each other, creating a logical yet emotional design,” the company added in some top-tier concept car PR fluff. 

Kia's latest EV concepts emphasize 'cabin ambience,' geometric shapes
Kia

The interior is more fanciful, with a nearly button-free layout designed to emphasize the voluminous interior and create a “transformative cabin ambience,” Kia said. It features a horizontal screen mounted on top that functions as both gauge cluster and infotainment system, along with an oval steering wheel and real mirrors. The wide center console “table” converts to four modes, including “focus, social, refreshing and storage.” Meanwhile, the fiber weave materials and bioplastics make the cabin inviting and modern.

Kia's latest EV concepts emphasize 'cabin ambience,' geometric shapes
Kia

The Concept EV4 is a clean-sheet design with an emphasis on sportiness that also uses some strong geometric shapes. To that end, it has a low nose and long-tail silhouette with a wide stance, along with a “technical roof spoiler” — two small extensions on either side of the roof. Again, we’re seeing bulgy fenders, lots of bold lines and creases, a sloping glass roof and geometric lighting front and back. 

HVAC user interface incorporates a control panel that can be neatly stored in the center console when not in use
Kia

The interior is broadly the same as the Concept EV3, but an “HVAC user interface incorporates a control panel that can be neatly stored in the center console when not in use,” according to Kia. It incorporates handwoven fabrics in the vehicle’s storage area and dashboard to create a 3D effect, and features natural dies and recycled cotton in the interior. 

Kia's latest EV concepts emphasize 'cabin ambience,' geometric shapes
Kia

Kia didn’t get into the power, battery or other powertrain features of either car, and painted both as test cases to see what people think. “That’s why we came to Los Angeles and America’s savviest EV consumers, to gauge reaction to two potential opportunities within the Kia lineup,” said Kia America’s COO Steven Center. It looks like Kia has nailed these designs once again, so don’t be surprised to see them appear in some form as real production vehicles. 

This article originally appeared on Engadget at https://www.engadget.com/kias-latest-ev-concepts-go-big-on-geometrics-and-cabin-vibes-190529735.html?src=rss

Source: Engadget – Kia’s latest EV concepts go big on geometrics and cabin vibes

This Exclusive For All Mankind Clip Shows Why It's So Freaking Great

Are you watching For All Mankind? If not, you should be. Apple TV+’s phenomenal sci-fi drama just returned for season four, and io9 has an exclusive clip from its second episode which debuts Friday. But even if you’re not watching the show, this clip, as simple as it may be, is an almost perfect example of why you…

Read more…



Source: Gizmodo – This Exclusive For All Mankind Clip Shows Why It’s So Freaking Great

UK authorizes first gene therapy for treating sickle cell disease

In a landmark decision, the UK’s Medicines and Healthcare products Agency (MHRA) approved the use of a gene-editing therapy called Casgevy for patients with sickle cell disease and beta thalassemia — both of which are hereditary disorders related to genetic mutations of the red blood cells. The treatment, manufactured by Vertex, is the first-ever approved therapy that utilizes CRISPR-based gene editing technology to treat eligible patients.

The UK approval of the novel therapy is informed by two previous global clinical trials that indicated the treatment’s efficacy. 97 percent of patients using Casgevy were relieved of severe pain associated with the blood disorders for at least 12 months after treatment during the trials. The results suggest that the gene editing treatment could replace the current standard for care. Stem cell therapy and bone marrow transplants are currently the only pathways to cure sickle cell disease and beta thalassemia, however, they involve a lot of risks.

Both sickle cell disease and beta thalassemia are blood disorders characterized by defective red blood cells that can’t carry oxygen, and require patients to get monthly blood transfusions that can be costly and time-consuming. Casgevy works by specifically targeting the genes in the bone marrow stem cells that produce faulty blood cells. For the treatment to work, a patient’s stem cells need to be extracted from their bone marrow, edited in a lab and then re-infused into the patient.

Despite its promising outlook, CRISPR-based therapies may not be easily available to the general public. Gene editing is an expensive endeavor. The Innovative Genomics Institute (IGI) estimates that the average CRISPR-based therapy will cost between $500,000 and $2 million per patient. The IGI has built out an ‘Affordability Task Force’ to tackle the issue of expanding access to these novel therapies.

Aside from costliness, gene editing therapies offer huge promise to innovate treatment pathways for rare conditions including neurodegenerative diseases, cancer and muscular atrophy. More importantly, this landmark approval for Casgevy “opens the door for further applications of CRISPR therapies in the future,” Prof Dame Kay Davies, a scientist from the University of Oxford, said. And new iterations of gene editing technologies may even surpass CRISPR in the future.

Casgevy is still being reviewed by regulatory agencies for safety standards in other countries, including the United States and Saudi Arabia. A marketing application, the first step towards approval for the therapy, was recently validated by the European Medicines Agency.

This article originally appeared on Engadget at https://www.engadget.com/uk-authorizes-first-gene-therapy-for-treating-sickle-cell-disease-184130989.html?src=rss

Source: Engadget – UK authorizes first gene therapy for treating sickle cell disease