Allstate Insurance Sued For Delivering Personal Info In Plaintext

An anonymous reader quotes a report from The Register: New York State has sued Allstate Insurance for operating websites so badly designed they would deliver personal information in plain-text to anyone that went looking for it. The data was lifted from Allstate’s National General business unit, which ran a website for consumers who wanted to get a quote for a policy. That task required users to input a name and address, and once that info was entered, the site searched a LexisNexis Risk Solutions database for data on anyone who lived at the address provided. The results of that search would then appear on a screen that included the driver’s license number (DLN) for the given name and address, plus “names of any other drivers identified as potentially living at that consumer’s address, and the entire DLNs of those other drivers.”

Naturally, miscreants used the system to mine for people’s personal information for fraud. “National General intentionally built these tools to automatically populate consumers’ entire DLNs in plain text — in other words, fully exposed on the face of the quoting websites — during the quoting process,” the court documents [PDF] state. “Not surprisingly, attackers identified this vulnerability and targeted these quoting tools as an easy way to access the DLNs of many New Yorkers,” according to the lawsuit. The digital thieves then used this information to “submit fraudulent claims for pandemic and unemployment benefits,” we’re told. … [B]y the time the insurer resolved the mess, crooks had built bots that harvested at least 12,000 individuals’ driver’s license numbers from the quote-generating site.


Read more of this story at Slashdot.

Path of Fury – Episode I: Tetsuo’s Tower Grapples With Rhythm Game Influences

If you want to introduce somebody to virtual reality for the first time, Beat Saber is a reliable option. It’s easy to read, the locomotion is stationary, and its rhythm-driven nature makes for a familiar greeting. Whether or not that person has played similar games before, the premise is simple enough: swing the swords where the arrows tell you to with the beat.

On paper, Path of Fury – Episode I: Tetsuo’s Tower is a different beast. Instead of gazing at colorful mappings of songs, you’re punching your way up a skyscraper, defeating dozens of enemies in quick succession. Yet, the higher I climbed, the more familiar this endeavor felt, following a structure akin to that of Beat Saber-likes. The discovery shone a light on a predicament that seems to permeate the VR space as a whole. The chances of success in VR game development for novel ideas are slim, so games are bound to build on tested foundations instead.

VR-established genres, from rhythm games to fitness apps, have set a standard that is difficult to abandon. Even in cases like Path of Fury, a game about kung fu fighting, it makes sense to follow these conventions even if it can occasionally feel constraining as well.

Beat by Beat

It takes Path of Fury – Episode I: Tetsuo’s Tower no time to showcase the gist of the experience. During a moody tutorial in which you use a goon as a punching bag, you’re instructed about the general movement. Left hand is blue, right hand is red. Markers appear on different parts of the body, and you need to match your knuckles with them accordingly. Some don’t have a color, inviting punches with either fist indiscriminately.

In that vein, Path of Fury is similar to combat-heavy games like Batman: Arkham Shadow than those with more free roam movement, like Skydance’s Behemoth, for example. You’re told where and when to punch. Unlike Arkham Shadow, which mixes this scripted framework with the series’ existing combat flair encouraging you to use gadgets and follow quick reactions to maintain a combo streak, Path of Fury is more streamlined. You only use your fists to attack and your open palms to deflect upcoming hits.

A dark room where groups of people obscured by shadow can be seen

Aside from swinging your arms, there’s little movement involved elsewhere. Evoking the spirit of light gun shooters, from Time Crisis to The House of the Dead, your smackdowns happen on-rails. Fight an enemy until you knock them down, and the game transitions to the next battle after a short fade-to-black. Pair this with telegraphed points of impact for your fists, and you’ll quickly feel like you’re hitting notes that are coming your way through a virtual fretboard.

Path of Fury’s biggest strength is translating this structure to the thrill and pressure of back-to-back brawling. Sometimes, you’re prompted to deal multiple hits in quick succession, but some enemies require punches with more impact. Especially ones that are way bigger than the protagonist in height and size. The further you progress, the more “special” foes you’ll encounter, with clear patterns that you have to memorize to deflect and counterattack properly. The boss in the second stage, for example, would punish me for missing an area of impact, forcing me to endure another chain of attacks until it was my turn again.

Furthermore, some fights resemble having to deal with double or triple notes at the same time, with multiple enemies on screen. During such cases, you end up having to repeat attacks with the same hand following, you guessed it, another pattern. Your speed is rewarded, too, with some areas of impact appearing only after successfully blocking an attack, and only for a short window.

In the grand scheme of things, Path of Fury delivers its fantasy with grace. Getting through levels requires precision, speed, and endurance, such as in real-life fights. The abundance of pattern memorization, as well as rhythm, however, makes it feel like a coat of paint over existing VR experiences. The setting and objectives may be different, but everything else is familiar.

A surveillance room where an enemy is nearby

Saying that Path of Fury doesn’t offer anything novel would be a disservice. When you’re in the swing of things, its blood-pumping fantasy excels, but it’s also not wrong to see it as yet another iteration on existing ideas. It’s a game that demands confidence in your skills to succeed, even if you can feel a sense of hesitation in pushing beyond the current norm of VR gaming in the walls of every room of the skyscraper.

Every session of Path of Fury ends with the same ritual. You wipe your headset lenses, push your hand across your sweating eyebrows, and look at the calorie count on your watch. This is familiar territory for VR – you’ve probably repeated this ritual already in numerous other games – and you’ll likely do it again during the next few years, whether you’re in a skyscraper or following the beat of a song.

Path of Fury – Episode I: Tetsuo’s Tower is available now on the Meta Quest platform.

These Googly Eyes Will Help You Find Your Mac’s Cursor

It happened again: Across sprawling tabs, dozens of windows, and countless unread messages, you’ve somehow lost your cursor. Maybe it’s hiding in the corner of your screen, but, hmm—nothing seems to be popping out of any of them. What’s more, if you have your Mac connected to multiple monitors on your desk, your cursor could be anywhere. Tell work to push your deadlines; you’re gonna need a minute.

But before you damage your reputation, there’s a better way. Well, a couple of ways, actually—but one of them is far more fun. To save yourself from this grief in the future, try “Googly Eyes,” a free app that adds, yes, a pair of googly eyes to your Mac’s menu bar.

Googly Eyes is the creation of Sindre Sorhus, a developer we’ve frequently covered on Lifehacker. Sorhus has made sticky notes for the menu bar, tools to adjust the spacing of the menu bar, an easy way to switch your default browser on the fly, an app for expanding the number of extensions Shortcuts supports, and a tool for making Finder more like Windows’ File Explorer.

Googly Eyes is a little different, because the premise is beyond simple: Once you install and launch the app, you’ll find a pair of cartoonish googly eyes resting on your Mac’s menu bar. These eyes are trained on the location of your cursor: Move your mouse or glide your finder on your trackpad, and the eyes will follow it.

My cursor disappeared while typing the above paragraph. Rather than scrambling around looking for it, I can glance up at the googly eyes, see they’re focused on the right side of my Mac, then move my mouse to the left, where my cursor will predictably reappear. Click your mouse or trackpad, and the eyes blink. It’s fun and useful.

That’s all there really is to it. If you’re bored on your Mac, you can bring your cursor up to the googly eyes to mess with them a bit. Moving directly between the eyes will cause them to go cross-eyed, while dragging more towards one eye will cause that eye to move away from the other a bit.

googly eyes in threes

Credit: Lifehacker

Now, there is a solution built into macOS for whenever you can’t find your cursor: shake it. Shaking your cursor really fast not only increases the chances you’ll see it buzzing around your screen, your Mac will also temporarily make it huge. It’s a great feature, but it isn’t perfect: Sometimes, shaking your cursor doesn’t pull it up, especially if you’re working across monitors, or the task requires more vigorous shaking than you might expect. In these cases, you might want a pair of helpful eyes to keep watch for you, and clue you into your cursor’s position.

Googly Eyes is a simple setup, but Sorhus does have some troubleshooting advice should you need it: If you don’t see Googly Eyes in your menu bar after opening the app, quit some other menu bar apps, as macOS sometimes hides these apps when there are too many open at once (especially on smaller displays). If your Mac cannot access the App Store, you can download the app directly from Sorhus, but note this method won’t offer automatic updates, and Sorhus will only update the app on his website on an annual basis.

Here’s How To Enable FSR 4 With Frame Gen In DLSS And XeSS Game Titles

Here’s How To Enable FSR 4 With Frame Gen In DLSS And XeSS Game Titles
The problem with introducing a new technology, whether it be an upscaler like FSR 4 or a hardware feature like AVX, is that you have to wait for software to make use of it. Except maybe not, in the case of FSR 4, thanks to the OptiScaler mod and its fresh support for AMD’s new AI-powered scaling tech.

OptiScaler is a multi-game mod that’s

Using the QZ App with Zwift Running

In a recent article, Eric touched upon auto incline within Zwift and at the end of the article touched up how getting incline simulation was possible using a 3rd party app called QZ. 

The incline simulation topic using QZ has caused a fair amount of confusion with some misinformation being published, so I thought I would clear up any confusion with an in-depth piece on QZ and all you can do with it within the running arena of Zwift.

What is QZ? 

QZ is a 3rd party app developed by Roberto Viola (download in the Apple Store for $4.99 or Google Play for $5.99).  Frustrated after purchasing a treadmill only to find it wouldn’t connect to Zwift, Roberto designed an app that would bridge the BT signal being transmitted by his treadmill and send it to Zwift. 

For an in-depth interview with Roberto, click here to listen to his interview with Ian Hannah where he shares his background and the history of QZ, including where the name comes from.

QZ has evolved massively over the years.  From its humble beginnings of connecting Roberto’s treadmill, it now covers a range of exercise equipment including turbo trainers, x-trainers, and rowing machines to name but a few.  Recent innovations include Virtual Gearing, which has caused excitement in the cycling world since it opens up this feature to many indoor trainers not capable of doing it natively in game (such as the entire Garmin/Tacx range).

But let’s get back to running and look at the main features that QZ can bring to your running.

Auto Incline

Going by many other names such as gradient simulation, incline control, etc, the ability to have the treadmill adjust the incline to match the in-game course was and still is to some extent the number 1 requested feature.  Until the release of the Wahoo Kickr Run this was a feature that couldn’t be done natively.  However, it’s a little-known fact that every time the gradient changes whilst running in game, that gradient is transmitted via Bluetooth!  This is where QZ is able to capture that data and send it to your treadmill for it to adjust its incline.

There are two ways to do this and which method you use depends on your equipment and whether you have an active Zwift subscription.

Method 1

To use this method, you need an Android device and an active Zwift subscription.  There’s no difference between a running or cycling subscription, it’s simply a Zwift subscription.  So if you currently have a subscription that you use for cycling, you’re good to go. 

Currently this version only works on Android, and has to be a different device to what you are running Zwift on.  The device on which you run Zwift can be Apple, Android, Windows, etc, but QZ must be run on an Android device.  I’m sure this will change over time but Roberto spins multiple plates and receives over 400 emails daily for support and prioritises helping users over development of new features. 

What this method does is simulate your treadmill being the Wahoo Kickr Run, fooling Zwift into thinking your treadmill has the ability to be controlled natively.  This opens up a new box on the pairing screen to pair gradient control.  Using this method, you get the popup gradient display under the central HUD which displays the current gradient and you can see how far you’ve progressed up that hill!

The full user guide can be seen here.  Skip to the line in bold titled only on Android with version 2.18.4 and above.

Method 2

Other than the cost of the QZ app, this method is free, as you don’t need an active Zwift subscription.  And if you are an iOS user only, then you’re in luck as you can run QZ on your device for this method.  This method also runs on Windows and Mac.  In fact, you don’t need a spare device as using this method you can run QZ on the same device on which you are running Zwift.  (You’ll probably want to run it on a separate device however so you can see both QZ and Zwift at the same time.)  This method requires you to enter your username and password into QZ so that the app can access the API’s of Zwift in order to gather the incline data.  Rest assured, however, that this login information along with every piece of data collected by QZ is only stored locally.  No user data is sent to a server or anywhere in fact. 

This version of auto incline comes with a couple of minor issues, the first being that it can only poll for the current gradient every 5 seconds.  Any less and it causes major issues.  What this means is that as you hit the base of a hill there’s a slight delay before the treadmill reacts.  Likewise, when you crest the hill you get up to 5 seconds longer before it turns downwards.  This means it’s slightly less accurate than method 1, but it’s barely noticeable.

Another minor issue is that because Zwift doesn’t know you have auto incline, you don’t get the gradient display in the HUD. 

Heart Rate Controlled Speed

A little known and vastly underused feature of QZ is the ability for it to control your treadmill speed and incline based on your heart rate.  Many of you will use zones for your training, often running to keep your heart rate in a specific zone.  QZ can do this for you.  By telling the app your max HR you can then ask the app to control the speed and elevation so that you stay in this zone.  You can adjust the % of your heart rate max so that the QZ zones match the coloured zones of Zwift, too. 

When testing this feature with Roberto many months ago I found that when I hit a decent gradient my HR would rocket through the zones quicker than QZ could slow the speed and instead of keeping me in Zone 2 I would sail through to Zone 4.  The net effect would be QZ would then slow the treadmill down to almost a walk to compensate so it felt like I was forever speeding up and slowing down.  Roberto then developed the app so that it responds much quicker and now when you hit a gradient it slows the treadmill down before waiting for your HR to go outside of your zone.  And then as you crest the hill it speeds back up again.  This feels not too dissimilar to how the Wahoo Kickr Run controls speed based on your position on the treadmill.

This gives a far more stable experience where your HR remains fairly constant throughout.  You can of course turn auto incline off so that your treadmill doesn’t simulate hills, in which case QZ will control the speed only.  Perfect for those who need to do that long zone 2 run.   

Workout Simulation

Another hotly requested feature is the ability to have Zwift control speed and incline based on a workout you are doing.  Currently it doesn’t do this as when Zwift displays the target speed and incline on screen it doesn’t actually transmit this information, it displays it only.

However, you can ask QZ to do this for you.  As Zwift has no run workout editor, you’ll need to create a workout using a workout editor. Here is a link to one which gives you instructions on creating a workout and how to import it to Zwift.

If you import this workout to Zwift and also upload it to QZ you can then simultaneously start both.  Your workout is then running on Zwift with displays for speed and incline, but when each block changes QZ will adjust the speed and/or incline to match.  Obviously things such as pausing, skipping a block and adjusting the bias of the workout add a layer of complication.

But in the absence of a native workout editor this is as good as it gets.

Wrapping It Up

So that is all things QZ and running.  I’ve been using QZ since 2021, having had the same issue as Roberto in that I bought a treadmill that would only talk to its own app.  I’ve also used auto incline since then, back when it was so hard to get working. After knowing Roberto for 4 years, I know how hard he works and how much time he dedicates to helping users get their equipment working.  You will not get this level of support from any other developer, and the app costs the price of a coffee!

But please please consider a monthly subscription or a one-off donation.  It all helps to support Roberto in developing the app and supporting end users.  He isn’t the head of a multi-person team of app developers working on QZ, it’s him alone. 

Lastly: there is a very active Facebook group here where you can ask questions, get support and even thank Roberto personally. 

Questions or Comments?

Do you use the QZ app? Got questions or comments? Share below!

Halo Infinite Is Bringing Back A Classic Game Mode And Fans Are Stoked

Halo Infinite Is Bringing Back A Classic Game Mode And Fans Are Stoked
Halo Infinite didn’t reestablish the successful franchise as a heavyweight in the gaming space the way Microsoft might’ve hoped, but the game has maintained a loyal player base several years after its release. The recently rebranded Halo Studios continues to bring new content and features to these faithful gamers. The next featured drop, Operation:

‘Time Affluence’ Is a Different Way to Think About Wealth

It makes sense that most of us focus on money when it comes to our happiness. Not being able to afford stuff like rent is stressful, and going into debt to feed yourself just exacerbates that sense of powerlessness. Whatever your financial situation, unless you’re oligarch-levels of wealthy you probably focus everything on making, saving, and stretching a much money as possible.

But if you’re not happy even if your bills are paid and your debt is manageable, it’s probably because you’re thinking about money the wrong way. Instead of thinking about being affluent in terms of money, you should be thinking in terms of being affluent in time.

What is time affluence?

Time affluence—the feeling that you have enough time to accomplish everything you want to get done—is a crucial aspect of our happiness and sense of personal satisfaction. Time poverty is the opposite—that stressful feeling you get when there aren’t enough hours in the day to get everything done. Between commuting to and from our jobs, the time spent working, then the chores at home, many of us barely have time to eat some dinner and maybe stream a show before collapsing into bed—and starting the process over again the next day.

Then, our weekends are filled with household projects and maintenance and other responsibilities (or second jobs or overtime). We keep telling ourselves that we’ll get back to a hobby, or make time to see friends, or get some extra sleep next week, or next month, or at some unknowable time in the future.

Time poverty has been shown to have an adverse effect on both mental and physical health. The mistake many of us make is thinking that the answer to time poverty is simply having more money—but the key is using money to gain more time. If all you’re doing is selling more of your time (to a second job, or a more demanding position) then you’re actually increasing your time poverty even if your bank account is growing. On the other hand, having more money means you can potentially buy more time for yourself. The trick is to stop thinking solely in terms of how you’re spending your money and more in terms of how you’re spending your time.

How to become time affluent

Time is one of the few resources in our lives we can’t create more of no matter how creative, ambitious, or hard-working we are. You get 24 hours in a day and that’s it—and once those hours are gone you can’t get them back. But what you can do to become more time affluent is manage your time more effectively, treating it like the limited resource it is. You can achieve more time affluence by doing four fundamental things:

  • Organize and prioritize. Since your time is limited, stop treating it like an amorphous, infinite resource you always have more of. Make lists of things you need or want to do and prioritize them. Then use time blocking to break each of those priorities into a fixed amount of time needed to accomplish them or at least move them toward completion. This avoids letting tasks pile up, which increases stress and that sense of not being in control of your time, and provides a visual guide to how your day will play out. And having clear times for specific activities to end will increase your efficiency.

  • Delegate. Always think about what you can delegate to someone else. For example, if you can afford to hire cleaners for your home you can reclaim the time you would otherwise spend cleaning the house. You’re essentially buying time from someone else.

    But reclaiming that time doesn’t have to mean paying someone. If there are tasks that someone else in your life could be taking on (chores at home or work tasks not officially in your job description, for example) that will also claw back some time for you.

  • Automate. Are there aspects of your life you can automate? Bill paying is an easy example of this: Instead of spending an hour every week paying bills individually, setting up automatic payments gets you that hour back. Think about any opportunities you have to automate stuff—prescription refills, meal plans (if it’s in your budget), even grocery shopping can be automated these days through weekly subscription platforms.

  • Monotask. Finally, be aware of what’s known as “time confetti”—the way we spend little bits of time on a seemingly infinite scroll of activities, most of them online. Jumping from thing to thing can feel like multitasking, but it isn’t an efficient way to get stuff done.

    Instead, monotask, which means focusing on a single task until it’s done. It’s an extremely simple concept, but it requires discipline, like sticking to the time-blocking schedule you created, eliminating distractions, and forcing yourself to focus.

Having more money can make some of these steps easier or even possible, surely—but you can apply these four principles to your time management no matter what your financial circumstances are, and improve your time affluence to poverty ratio at least a little bit.

FTC Asks To Delay Amazon Prime Deceptive Practices Case, Citing Staffing Shortfalls

The Federal Trade Commission asked a judge in Seattle to delay the start of its trial accusing Amazon of duping consumers into signing up for its Prime program, citing resource constraints. CNBC: Attorneys for the FTC made the request during a status hearing on Wednesday before Judge John Chun in the U.S. District Court for the Western District of Washington. Chun had set a Sept. 22 start date for the trial. Jonathan Cohen, an attorney for the FTC, asked Chun for a two-month continuance on the case due to staffing and budgetary shortfalls.

The FTC’s request to delay due to staffing constraints comes amid a push by the Trump administration’s Department of Government Efficiency to reduce spending. DOGE, which is led by tech baron Elon Musk, has slashed the federal government’s workforce by more than 62,000 workers in February alone. “We have lost employees in the agency, in our division and on our case team,” Cohen said.


Read more of this story at Slashdot.

[$] New terms of service for PyPI

On February 25, the Python
Software Foundation
(PSF), which runs the Python Package Index (PyPI), announced
new terms
of service
(ToS) for the repository. That has led to some questions
about the new ToS, and the process of coming up with them. For one thing, the previous terms
of use
for the service were shorter and simpler, but there are other
concerns with specific wording in the new agreement.

Google apologizes for Chromecast outage and promises a fix

Many people using older Chromecast devices experienced a shock in recent days when their units lost the ability to cast content. The company ended the brand last year, which led folks to think that this was a planned obsolescence of some kind. Here’s some good news. It’s just a software issue and Google is working on it.

The company sent an email to users to say that its engineers are “working to resolve this as soon as possible, and will keep you updated when there is more to share.” Google was fairly vague in its wording here, but at least we know a fix is coming.

Yikes, Google really fumbled.
RIP Chromecast. pic.twitter.com/XTLulM3EAy

— DLLN (@DLLNBRAND) March 12, 2025

The issue primarily impacts older Chromecasts and the Chromecast Audio device and prevents them from casting. Google says the cause of the problem has been identified but didn’t reveal any specifics.

However, it has cautioned users to not factory reset impacted Chromecast devices. This will lock users out of the gadget entirely. Google has suggested it would help these people, because performing a factory reset would likely be one of the first troubleshooting steps, but hasn’t provided a time frame.

One Reddit user claims to have found the problem that caused the devices to lose functionality, noting that it was “most definitely due to the certificate baked into the Chromecast having expired.” This person said that the certificate specified it would no longer be active after March 9 and, well, that’s the day before many models started failing.

For the uninitiated, the issue causes an “untrusted device error” whenever someone tries to cast on certain models. The only option is to dismiss the error, which disables casting. Impacted units include the 2nd-gen Chromecast from 2015 and the Chromecast Audio.

This article originally appeared on Engadget at https://www.engadget.com/entertainment/google-apologizes-for-chromecast-outage-and-promises-a-fix-172103579.html?src=rss

Google’s Gemma 3 is an open source, single-GPU AI with a 128K context window

Most new AI models go big—more parameters, more tokens, more everything. Google’s newest AI model has some big numbers, but it’s also tuned for efficiency. Google says the Gemma 3 open source model is the best in the world for running on a single GPU or AI accelerator. The latest Gemma model is aimed primarily at developers who need to create AI to run in various environments, be it a data center or a smartphone. And you can tinker with Gemma 3 right now.

Google claims Gemma 3 will be able to tackle more challenging tasks compared to the older open source Google models. The context window, a measure of how much data you can input, has been expanded to 128,000 from 8,192 tokens in previous Gemma models. Gemma 3, which is based on the proprietary Gemini 2.0 foundation, is also a multimodal model capable of processing text, high-resolution images, and even video. Google also has a new solution for image safety called ShieldGemma 2, which can be integrated with Gemma to help block unwanted images in three content categories: dangerous, sexual, or violent.

Most of the popular AI models you’ve heard of run on collections of servers in a data center, filled to the brim with AI computing power. Many of them are far too large to run on the kind of hardware you have at home or in the office. The release of the first Gemma models last year gave developers and enthusiasts another low-hardware option to compete with the likes of Meta Llama3. There has been a drive for efficiency in AI lately, with models like DeepSeek R1 gaining traction on the basis of lower computing costs.

Read full article

Comments

Doloresaurus, An LED Skeletal T-Rex That Roams San Francisco

These are a couple video of San Francisco lawyer Trevor Mead’s Doleresaurus costume, a blue-LED illuminated t-rex exoskeleton he likes to wear around Haight Street and Dolores Park at sunset. Hey — we all spend our evenings differently. Unless you spend yours eating multiple TV dinners back-to-back and yelling at video games, in which case we spend them the exact same.

Traversal-resistant file APIs (The Go Blog)

Damien Neil has written an article for the Go Blog about path
traversal vulnerabilities
and the os.Root API added in Go 1.24 to help prevent
them.

Root permits relative path components and symlinks that do not escape
the root. For example, root.Open("a/../b") is permitted. Filenames are
resolved using the semantics of the local platform: On Unix systems,
this will follow any symlink in “a” (so long as that link does not
escape the root); while on Windows systems this will open “b” (even if
“a” does not exist).