Advantages of Data Virtualization

The Future of Data

Enlarge / This is essentially the kind of water heater the author has hooked up, minus the Wi-Fi module that led him down a rabbit hole. Also, not 140-degrees F—yikes. (credit: Getty Images)

The hot water took too long to come out of the tap. That is what I was trying to solve. I did not intend to discover that, for a while there, water heaters like mine may have been open to anybody. That, with some API tinkering and an email address, a bad actor could possibly set its temperature or make it run constantly. That’s just how it happened.

Let’s take a step back. My wife and I moved into a new home last year. It had a Rinnai tankless water heater tucked into a utility closet in the garage. The builder and home inspector didn't say much about it, just to run a yearly cleaning cycle on it.

Because it doesn’t keep a big tank of water heated and ready to be delivered to any house tap, tankless water heaters save energy—up to 34 percent, according to the Department of Energy. But they're also, by default, slower. Opening a tap triggers the exchanger, heats up the water (with natural gas, in my case), and the device has to push it through the line to where it's needed.

Read 38 remaining paragraphs | Comments

Top 30 Cybersecurity Influencers of 2024

30. Alexandre Blanc - President and Owner at Alexandre Blanc Cyber

29. Alissa Abdullah - Deputy CSO at Mastercard

29. Jane Frankland - CEO at KnewStart

27. Mark Lynd - Head of Executive Advisory & Corporate Strategy at NETSYNC

26. Naomi Buckwalter - Director of Product Security at Contrast Security

25. Raj Samani- Chief Scientist for Cybersecurity

24. Tyler Cohen Wood- Co- Founder of Dark Cryptonite

23. Theresa Payton- CEO of Fortalice Solutions

22. Bill Brenner-Vice President, Custom and Research Content Strategy, CyberRisk Alliance 

21. Brian Honan- CEO of BH Consulting

20. Magda Chelly- Senior Cybersecurity Expert

19. Marcus J. Carey- Principal Research Scientist at ReliaQuest, CEO of ThreatCare

18. Andy Greenberg- Senior Writer at WIRED

17. Paul Asadoorian- IT Security Engineer

16. Nicole Perlroth- New York Times

15. Graham Cluley- Smashing Security

14. Rachel Tobac- Hacker and CEO of SocialProof Security 

13. Katie Moussouris- Founder of Luta Security

12. Chuck Brooks- President of Brooks Consulting International 

11. Daniel Miessler- Founder of Unsupervised Learning

10. Kevin Beaumont- Internet Cyber Personality

9. Lesley Carhart- hacks4pancakes

8. Bruce Schneier- Schneier on Security

7. Eugene Kaspersky- CEO of Kaspersky Lab

6. Eric Geller - Cybersecurity Journalist

5. Shira Rubinoff- The Futurum Group 

4. Mikko Hyppönen- Chief Research Officer at WithSecure 

3. Kim Zetter - Investigative Journalist and Book Author

2. Brian Krebs- Krebs on Security

1. Robert Herjavec- CEO of Global Cybersecurity Firm - Cyderes

Enlarge (credit: Benj Edwards)

Ars Technica AI Reporter and tech historian Benj Edwards has co-written a book on the Virtual Boy with Dr. Jose Zagal. In this exclusive excerpt, Benj and Jose take you back to Nintendo of the early '90s, where a unique 3D display technology captured the imagination of legendary designer Gunpei Yokoi and set the stage for a daring, if ultimately ill-fated, foray into the world of stereoscopic gaming.

Seeing Red: Nintendo's Virtual Boy is now available for purchase in print and ebook formats.

A full list of references can be found in the book.

Nearly 30 years after the launch of the Virtual Boy, not much is publicly known about how, exactly, Nintendo came to be interested in developing what would ultimately become its ill-fated console. Was Nintendo committed to VR as a future for video games and looking for technological solutions that made business sense? Or was the Virtual Boy primarily the result of Nintendo going “off script” and seizing a unique, and possibly risky, opportunity that presented itself? The answer is probably a little bit of both.

As it turns out, the Virtual Boy was not an anomaly in Nintendo’s history with video game platforms. Rather, it was the result of a deliberate strategy that was consistent with Nintendo’s way of doing things and informed by its lead creator Gunpei Yokoi’s design philosophy.

Read 47 remaining paragraphs | Comments

Enlarge / The 2024, M4-equipped 13-inch iPad Pro. (credit: Samuel Axon)

The new iPad Pro is a technical marvel, with one of the best screens I’ve ever seen, performance that few other machines can touch, and a new, thinner design that no one expected.

It’s a prime example of Apple flexing its engineering and design muscles for all to see. Since it marks the company’s first foray into OLED beyond the iPhone or Watch, and the first time a new M-series chip has debuted on something other than a Mac, it comes across as a tech demo for where the company is headed beyond just tablets.

Still, it remains unclear why most people would spend one, two, or even three thousand dollars on a tablet that, despite its amazing hardware, does less than a comparably priced laptop—or at least does it a little more awkwardly, even if it's impressively quick and has a gorgeous screen.

Read 53 remaining paragraphs | Comments

Read 20 remaining paragraphs | Comments

Enlarge / The Velomobile Bülk, with its hood in place. Note the hood has an anti-fog covering on the visor (which is flipped up). The two bumps near the front of the hood are there to improve clearance for the cyclist's knees. (credit: JOHN TIMMER)

My brain registered that I was clearly cycling. My feet were clipped in to pedals, my legs were turning crank arms, and the arms were linked via a chain to one of the wheels. But pretty much everything else about the experience felt wrong on a fundamental, almost disturbing level.

I could produce a long list of everything my mind was struggling to deal with, but two things stand out as I think back on the experience. The first is that, with the exception of my face, I didn't feel the air flow over me as the machine surged forward down a slight slope. The second, related to the first, is that there was no indication that the surge would ever tail off if I didn't hit the brakes.

Living the dream

My visit with a velomobile was, in some ways, a chance to reconnect with a childhood dream. I've always had a fascination with vehicles that don't require fuel, like bicycles and sailboats. And during my childhood, the popular press was filled with stories about people setting human-powered speed records by putting aerodynamic fiberglass shells on recumbent bicycles. In the wake of the 1970s oil crises, I imagined a time when the roads might be filled with people cycling these pods for their commutes or covering long distances thanks to a cooler filled with drinks and snacks tucked in the back of the shell.

Read 23 remaining paragraphs | Comments

Top 10 Cybersecurity Companies with Revenue over $1B

1) Palo Alto Networks

• Revenue: US $7.52 billion
• Founded: 2005 by Nir Zuk (former Check Point engineer)
• Headquarters: Santa Clara, California
• Key Products/Services: Advanced firewalls, cloud-based security solutions

2) Fortinet

• Revenue: US $5.3 billion
• Founded: 2000 by Ken Xie and Michael Xie
• Headquarters: Sunnyvale, California
• Key Products/Services: Network security platform, firewalls, endpoint security

3) Leidos

• Revenue: US $3.98 billion
• Founded: 1969
• Headquarters: Reston, Virginia
• Key Products/Services: IT security services, government contracting

4) CrowdStrike

• Revenue: US $3.4 billion
• Founded: 2011
• Headquarters: Sunnyvale, California
• Key Products/Services: Endpoint security platform, XDR, MDR, vulnerability management

5) F5 Networks

• Revenue: US $2.81 billion (2023)
• Founded: 1996
• Headquarters: Seattle, Washington, USA
• Key Products/Services: Application security, multi-cloud management, application delivery networking (ADN) solutions

6) Check Point

• Revenue: US $2.4 billion
• Founded: 1993
• Headquarters: Tel Aviv, Israel, and San Carlos, California
• Key Products/Services: Firewalls, network security solutions

7) Okta

• Revenue: US $2.3 billion
• Founded: 2009
• Headquarters: San Francisco
• Key Products/Services: Identity and access management (IAM), zero-trust security solutions

8) Zscaler

• Revenue: US $1.9 billion
• Founded: 2007
• Headquarters: San Jose, California
• Key Products/Services: Cloud security platform, zero-trust security solutions

9) Trend Micro

• Revenue: US $1.3 billion
• Founded: 1988
• Headquarters: Tokyo, Japan
• Key Products/Services: Cloud and enterprise cybersecurity solutions, antivirus, endpoint security

10) Proofpoint

• Revenue: US $1.1 billion (pre-acquisition)
• Founded: 2002
• Headquarters: Sunnyvale, California
• Acquired by: Thoma Bravo in 2021 (Acquisition price: $12.3 billion)
• Key Products/Services: Email Security, Advanced Threat Protection, Security Awareness Training, Archiving and Compliance, Digital Risk Protection

Enlarge / We'd like to avoid this. (credit: Science Photo Library/Andrzej Wojcicki/Getty Images)

In 2005, the United States Congress laid out a clear mandate: To protect our civilization and perhaps our very species, by 2020, the nation should be able to detect, track, catalog, and characterize no less than 90 percent of all near-Earth objects at least 140 meters across.

As of today, four years after that deadline, we have identified less than half and characterized only a small percentage of those possible threats. Even if we did have a full census of all threatening space rocks, we do not have the capabilities to rapidly respond to an Earth-intersecting asteroid (despite the success of NASA’s Double-Asteroid Redirection Test (DART) mission).

Some day in the finite future, an object will pose a threat to us—it’s an inevitability of life in our Solar System. The good news is that it’s not too late to do something about it. But it will take some work.

Read 35 remaining paragraphs | Comments

Enlarge (credit: themotioncloud/Getty Images)

Ethan Zuckerman wants to release a tool that would allow Facebook users to control what appears in their newsfeeds. His privacy-friendly browser extension, Unfollow Everything 2.0, is designed to essentially give users a switch to turn the newsfeed on and off whenever they want, providing a way to eliminate or curate the feed.

Ethan Zuckerman, a professor at University of Massachusetts Amherst, is suing Meta to release a tool allowing Facebook users to "unfollow everything." (Photo by Lorrie LeJeune)

The tool is nearly ready to be released, Zuckerman told Ars, but the University of Massachusetts Amherst associate professor is afraid that Facebook owner Meta might threaten legal action if he goes ahead. And his fears appear well-founded. In 2021, Meta sent a cease-and-desist letter to the creator of the original Unfollow Everything, Louis Barclay, leading that developer to shut down his tool after thousands of Facebook users had eagerly downloaded it.

Zuckerman is suing Meta, asking a US district court in California to invalidate Meta's past arguments against developers like Barclay and rule that Meta would have no grounds to sue if he released his tool.

Read 42 remaining paragraphs | Comments

Enlarge / Apple's latest iPad Air, now in two sizes. The Magic Keyboard accessory is the same one that you use with older iPad Airs and Pros, though they can use the new Apple Pencil Pro. (credit: Andrew Cunningham)

Apple has a new lineup of iPad Pro and Air models for the first time in well over a year. Most people would probably be hard-pressed to tell the new ones from the old ones just by looking at them, but after hands-on sessions with both sizes of both tablets, the small details (especially for the Pros) all add up to a noticeably refined iPad experience.

iPad Airs: Bigger is better

But let's begin with the new Airs since there's a bit less to talk about. The 11-inch iPad Air (technically the sixth-generation model) is mostly the same as the previous-generation A14 and M1 models, design-wise, with identical physical dimensions and weight. It's still the same slim-bezel design Apple introduced with the 2018 iPad Pro, just with a 60 Hz LCD display panel and Touch ID on the power button rather than Face ID.

So when Apple says the device has been "redesigned," the company is mainly referring to the fact that the webcam is now mounted on the long edge of the tablet rather than the short edge. This makes its positioning more laptop-y when it's docked to the Magic Keyboard or some other keyboard.

Read 15 remaining paragraphs | Comments

1. Cyble with Vision X

• A new "Alerts Insights" interface, previously known as "Executive Insights" and rebranded to reflect a more granular level of data analysis. 
• A revamped header and collapsible left pane for a cleaner, more efficient workspace. 
• A redesigned authentication screen that maintains the same API functionality while incorporating aesthetic enhancements. 

2. Theori with Xint

• Cloud Security: Continuous monitoring and enhanced visibility into cloud configurations, resource utilization, and access controls to swiftly respond to potential security risks. 
• External Threat Detection: Security tools designed to defend against unauthorized access for externally facing applications, including web applications, APIs, mobile apps, and third-party integrations. 
• Offensive Security AI Engine: A revolutionary approach to penetration testing that combines the expertise of award-winning offensive cybersecurity veterans with cutting-edge artificial intelligence technology that precisely pinpoints vulnerabilities. 

3. New SEI Tool

4. Cranium with First-of-its-Kind GenAI Exposure Management Solution

5. Vectra AI Expands Platform to Combat GenAI Attacks

Enlarge / Boeing's Starliner spacecraft is lifted to be placed atop an Atlas V rocket for its first crewed launch. (credit: United Launch Alliance)

NASA's senior leaders in human spaceflight gathered for a momentous meeting at the agency's headquarters in Washington, DC, almost exactly 10 years ago.

These were the people who, for decades, had developed and flown the Space Shuttle. They oversaw the construction of the International Space Station. Now, with the shuttle's retirement, these princely figures in the human spaceflight community were tasked with selecting a replacement vehicle to send astronauts to the orbiting laboratory.

Boeing was the easy favorite. The majority of engineers and other participants in the meeting argued that Boeing alone should win a contract worth billions of dollars to develop a crew capsule. Only toward the end did a few voices speak up in favor of a second contender, SpaceX. At the meeting's conclusion, NASA's chief of human spaceflight at the time, William Gerstenmaier, decided to hold off on making a final decision.

Read 47 remaining paragraphs | Comments

What is a Web DDoS Tsunami?

Real World Case Studies

Large National Bank

Major Insurance Company

Telecommunications Company

How to Defend Against Web DDoS Tsunamis

Enlarge (credit: Aurich Lawson | Getty Images | Beata Zawrzel)

No car company in recent years has been able to generate more news headlines than Tesla. Its original founders were among the very first to realize that lithium-ion laptop cells were just about good enough to power a car, assuming you put enough of them in a pack, and with critical funding from current CEO Elon Musk, the company was able to kick-start an electric vehicle revolution. But those headlines of late have been painting a picture of a company in chaos. Sales are down, the cars are barely profitable, and now the CEO is culling vast swaths of the company. Just what is going on?

Tesla had some good times

Always erratic, Musk's leadership has nevertheless seen the company sell electric cars in volume, profitably. What's more, Musk has at times been able to inspire faith in and devotion to his company's products in a way that makes the late Steve Jobs look like a neophyte—after the Model 3 debuted in 2016, 450,000 people gave $1,000 deposits to Tesla for a product that wouldn't go into production for at least 18 months.

Of course, that example also illustrates a long-running concern with the company and Musk's investment-attracting pitches: overhyping and underdelivering. By 2018, more than one in five reservation holders wanted a refund after cheaper models were delayed and delayed.

Read 35 remaining paragraphs | Comments

Simplify & Secure Your Logins with Top Password Managers

1. Google Password Manager

Pros

• Free: Google Password Manager is completely free, making it accessible to all Google Chrome users.
• Integrated into Chrome: Chrome users have access to Google's password manager without needing to install additional software.
• Consistent support: Given Chrome's popularity, Google Password Manager is likely to receive regular updates and support.

Cons

• Uncertain security: Google doesn't provide detailed information about the encryption standards used to protect user data, leaving some uncertainty about its security measures.
• Limited to Chrome: Google Password Manager is only available in the Chrome browser, excluding users of other browsers from accessing its features.

Who Should Use Google Password Manager?

2. 1Password

Pros

• 1Password offers a comprehensive tutorial, making it easy for new users to get started.
• The Watchtower feature alerts users to potential password vulnerabilities, helping them maintain strong password hygiene.
• The 1Password apps are well-designed and visually appealing, providing a seamless experience across mobile and desktop platforms.
• Users can easily organize their passwords and other sensitive information, enhancing usability.

Cons

• Unlike some competitors, 1Password doesn't offer a free tier for password management, which may deter budget-conscious users.
• Users may find the import options limited, especially when migrating from other password managers.
• 1Password lacks true password inheritance features, making it less convenient for sharing passwords among family or team members.

Who Should Use 1Password?

Pricing

3. Dashlane

Pros

• Includes VPN and phishing alerts
• Scans for compromised accounts
• Retains full password history
• Offers file storage

Cons

• Limited free version
• Expensive

Who Should Use Dashlane?

Pricing

4. Bitwarden

Pros

• Free and open-source, ensuring transparency and flexibility
• Supports passkeys for added security
• Offers emergency access options for trusted contacts
• Provides data breach monitoring and password hygiene reports

Cons

• Business tiers are relatively expensive compared to competitors

Who Should Use Bitwarden?

• Individuals: Anyone who wants to securely manage passwords across devices.
• Families: For secure password sharing and family organization.
• Businesses: From startups to enterprises for secure team password management.
• Tech Enthusiasts: Open-source platform for customization and contribution.

Pricing

5. Keeper

Pros

• Secure password-sharing, password hygiene, and emergency access options
• Attractive apps and browser extensions for ease of use
• Retains app access and credential history for reference

Cons

• A very restrictive free tier with limited features
• Some desirable features are only available as paid add-ons
• Importing credentials could be smoother

Who Should Use Keeper?

• Individuals: Those who need a secure and user-friendly platform to manage their passwords and sensitive information.
• Families: Families looking for a secure way to share passwords and sensitive data among members while ensuring privacy and security.
• Businesses: Companies of all sizes seek a secure password management solution for their employees, with features like password sharing, team folders, and admin controls.

Pricing

6. NordPass

Pros

• Supports multiple forms of multi-factor authentication.
• Offers clipboard-clearing capabilities.
• Scans for compromised accounts.
• Secure password-sharing and inheritance options.

Cons

• Inconsistent credential creation process.
• Limited free tier.

Who Should Use NordPass?

• Individuals: Those looking for a reliable tool to manage and secure their passwords and sensitive information.
• Families: Families seeking a secure way to share passwords and ensure digital security among members.
• Businesses: Companies require a secure password management solution for their employees, with features like team collaboration and admin controls.

Pricing

7. RoboForm

Pros

• Good business-specific features.
• Full feature 14-day free trial available for business users.
• Great mobile apps.

Cons

• Unintuitive interface.
• Secured shared folder not available for free users.

Who Should Use RoboForm?

• Professionals: Individuals who frequently deal with online forms and require secure password management.
• Families: Families seeking a secure password management solution for multiple users.
• Businesses: Companies require robust password management and form-filling capabilities for employees, with features like secure sharing and emergency access.

Pricing

8. Zoho Vault

Pros

• Offers MFA support and passkey logins.
• Easy password sharing and credential inheritance system.
• Password hygiene monitoring for all service tiers.
• Users can designate application-specific passwords.
• Robust free plan.

Cons

• Stores unencrypted user information.
• Awkward MFA adoption process.
• Clunky browser extension functionality.
• Cannot fill out web forms.
• Few personal data storage options.
• Confusing credential creation process on iOS.

Who Should Use Zoho Vault?

• Businesses: Companies require a robust password management solution with features like user access management and seamless integration with business tools.
• Teams: Teams seeking an efficient way to manage passwords and securely share credentials among members.
• Professionals: Individuals looking for a secure password management solution with features like multi-factor authentication and credential inheritance.

Pricing

9. LogMeOnce

Pros

• Free version available.
• Diverse multi-factor authentication (MFA) options.
• Unique emergency access tool.
• High-quality onboarding tutorial.

Cons

• The credential filling didn't work with the Android app in testing.
• Awkward password-importing process.
• Cluttered web vault interface.

Who Should Use LogMeOnce?

• Individuals: Those who want a secure and convenient way to manage their passwords and ensure strong online security.
• Families: Families looking for a secure password management solution for multiple users with features like photo login and emergency access.
• Businesses/Enterprises: Companies requiring advanced password management and security features for their employees, with options for team collaboration and secure sharing.

Pricing

10. Enpass

Pros

• Offline capabilities
• One-time fee option
• Extensive customization

Cons

• Not user-friendly
• No trial version for personal and family plans

Who Should Use Enpass?

• Individuals: Users who prioritize offline access to their password data and prefer a one-time payment model.
• Families: Families seeking a secure and cost-effective way to manage passwords across multiple devices.
• Businesses: Companies require robust password management and customization options for employees, with features like team sharing and data backups.

Pricing

To Wrap Up

The Role of Skilling in Cultivating Next-gen Tech Talent

Tailored Learning Paths

Hands-on Experience:

Industry Collaboration

Fostering Innovation and Growth

Enhanced Employability

Conclusion

Why CISOs Are Rethinking Their Approach?

Benefits of Managed Detection and Response

• Access to a team of security experts: Gain the expertise of MDR providers' seasoned analysts, enabling continuous monitoring and threat detection.
• Advanced threat detection and analysis: MDR services utilize sophisticated tools and techniques to identify and prioritize real threats, minimizing false positives.
• Reduced workload for internal teams: By outsourcing threat hunting, your security team can focus on areas where their expertise is most valuable.

What to consider when selecting an MDR partner

• Communication and Availability: How easily can you reach the MDR team, and what are their response times?
• Automation Levels: To what extent does the provider leverage automation for faster response and reduced human error?
• MDR Provider Security: Evaluate the MDR provider's security controls to mitigate the risk of data breaches due to their internal practices. Look for relevant security certifications.
• MDR Response Scope: What actions constitute an MDR response? Does it include just notifications, recommendations, or even taking action items without requiring intervention from your team?
• Detection Testing: How does the MDR team validate the accuracy of their threat detections to minimize false positives and negatives?
• Proactive Security Measures: What proactive security services are offered beyond basic threat hunting? Look for services like monitoring industry news, assisting with new vulnerability remediations, staying updated on CVEs (Common Vulnerabilities and Exposures), and promoting security hardening of your organization's tools.

Cyber Threats Businesses Need to be Aware of

Cybersecurity Best Practices