Month: January 2024
ChatGPT: friend or foe for app developers?
While ChatGPT helps developers save time and effort, using AI has important cybersecurity implications.
Once considered a laborious, complex, and highly skill requisite task, the world of coding has changed a lot today. Where previously there was a time when everything had to be written from scratch, and coding libraries didn’t exist, the modern day developer has a world of technology at their disposal to make the process easier. For businesses, it means that their developer teams can churn out code faster than ever before, allowing them to better meet the growing demands of consumers for quicker and better applications.
The latest technological development that’s further expediting coding speeds is AI, and more specifically ChatGPT. ChatGPT puts even more power into the hands of developers, with it now possible to auto-generate code in an instant in whatever programming language needed, all by using simple prompts. Whilst the adoption of ChatGPT and other AI tools in the coding space is already well under way, it’s important to stop and take stock of the cybersecurity implications it may bring with it. It is vital that developers are educated about cybersecurity best practices when using these tools to ensure that the code it produces is secure. For all the responsibility that ChatGPT can take on, the ultimate responsibility for making sure code is safe will always lie with humans. For that reason, precaution around how developers are using this technology is essential.
AI: the next step in the coding evolution
One of the aspects I find most enjoyable about software development is its constant evolution. As a developer, you are always seeking ways to enhance efficiency and avoid duplicating code, following the principle of “don’t repeat yourself.” Throughout history, humans have sought means to automate repetitive tasks. From a developer’s perspective, eliminating repetitive coding allows us to construct superior and more intricate applications.
AI bots are not the first technology to assist us in this endeavor. Instead, they represent the next phase in the advancement of application development, building upon previous achievements.
How much should developers trust ChatGPT?
Prior to AI-powered tools, developers would search on platforms like Google and Stack Overflow for code solutions, comparing multiple answers to find the most suitable one. With ChatGPT, developers specify the programming language and required functionality, receiving what the AI tool deems the best answer. This saves time by reducing the amount of code developers need to write. By automating repetitive tasks, ChatGPT enables developers to focus on higher-level concepts, resulting in advanced applications and faster development cycles.
However, there are caveats to using AI tools. They provide a single answer with no validation from other sources, unlike what you would see in a collective software development community, so developers need to validate any AI solution. In addition, because the tool is in beta stage, the code served by ChatGPT should still be evaluated and cross-checked before being used in any application.
There are plenty of examples of breaches that started thanks to someone copying over code and not checking it thoroughly. Think back to the Heartbleed exploit, a security bug in a popular library that led to the exposure of hundreds of thousands of websites, servers and other devices which used the code.
Because the library was so widely used, the thought was, of course, someone had checked it for vulnerabilities. But instead, the vulnerability persisted for years, quietly used by attackers to exploit vulnerable systems.
This is the darker side to ChatGPT; attackers also have access to the tool. While OpenAI has built some safeguards to prevent it from answering questions regarding problematic subjects like code injection, the CyberArk Labs team has already uncovered some ways in which the tool could be used for malicious reasons. Breaches have occurred due to blindly incorporating code without thorough verification. Attackers can exploit ChatGPT, using its capabilities to create polymorphic malware or produce malicious code more rapidly. Even with safeguards, developers must exercise caution.
The buck always stops with humans
With these potential security risks in mind, there are some important best practices to follow when using code generated by AI tools like ChatGPT. This involves checking the solution generated by ChatGPT against another source, like a community you trust, or friends. You should then make sure the code follows best practices for granting access to databases and other critical resources, following the principle of least privilege, secrets management, auditing and authenticating access to sensitive resources.
Make sure you double-check the code for any potential vulnerabilities and be aware of what you’re putting into ChatGPT as well. There is a question of how secure the information you put into ChatGPT is, so be careful when using highly sensitive inputs. Ensure you’re not accidentally exposing any personal identifying information that could run afoul of compliance regulations.
No matter how developers use ChatGPT in their work, when it comes to the safety of the code being produced the responsibility will always lie with humans. They cannot place blind faith in a machine that is ultimately just as liable to making mistakes as they are. To prevent potential issues, developers need to work closely with security teams to analyse how they’re using ChatGPT, and ensure that they’re adopting identity security best practices. Only then will they be able to reap the benefits of AI without putting security at risk.
We’ve featured the best AI writer.
This article was produced as part of TechRadarPro’s Expert Insights channel where we feature the best and brightest minds in the technology industry today. The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/news/submit-your-story-to-techradar-pro
Google One is About To Hit 100 Million Subscribers
During Alphabet’s Q4 2023 earnings call, Sundar Pichai announced that Google One is about to cross 100 million subscribers. From a report: The CEO said Google One is “doing incredibly well with strong user growth.” Pichai highlighted how it “provides expanded storage, unlocks exclusive features in Google products, and allows [the company] to build a strong relationship with [its] most engaged users.”
The consumer-facing subscription today includes storage (100 GB, 200 GB, 2 TB, 5 TB, 10 TB, 20 TB, and 30 TB tiers are available), which can be shared with up to five other accounts. You also get more Google Photos editing features, Workspace premium, VPN by Google One, dark web monitoring, 3-10% back on the Google Store, and additional customer support. In the US, pricing starts at $1.99 per month for 100 GB, while a popular 2 TB “Premium” plan is $99.99 annually.
Read more of this story at Slashdot.
During Alphabet’s Q4 2023 earnings call, Sundar Pichai announced that Google One is about to cross 100 million subscribers. From a report: The CEO said Google One is “doing incredibly well with strong user growth.” Pichai highlighted how it “provides expanded storage, unlocks exclusive features in Google products, and allows [the company] to build a strong relationship with [its] most engaged users.”
The consumer-facing subscription today includes storage (100 GB, 200 GB, 2 TB, 5 TB, 10 TB, 20 TB, and 30 TB tiers are available), which can be shared with up to five other accounts. You also get more Google Photos editing features, Workspace premium, VPN by Google One, dark web monitoring, 3-10% back on the Google Store, and additional customer support. In the US, pricing starts at $1.99 per month for 100 GB, while a popular 2 TB “Premium” plan is $99.99 annually.
Read more of this story at Slashdot.
Addressing the cloud skills gap
The skills required in this challenge are constantly evolving, too, thanks to the developments in areas such as cloud-native applications.
As an industry underpinned by innovation, the technology sector can be its own worst enemy when it comes to skills. Cloud technologies are evolving more rapidly than previous generations, but workers aren’t being trained or upskilled quickly enough to meet this demand. As a result, the industry continues to face a widening skills gap, with just over half of UK businesses (57%) ranking hiring the right tech talent as their biggest challenge, according to TechUK’s latest Digital Economy Monitor Survey.
The skills required in this challenge are constantly evolving, too, thanks to the developments in areas such as cloud-native applications, microservices, Kubernetes, containers, and hybrid and multi-cloud environments. The World Economic Forum predicts that by 2027, 44% of workers will see their core skills disrupted because technology is moving too fast, and only half of workers will have access to adequate training. In a world where we rely heavily on our phones, the data they need and their underlying cloud infrastructure – addressing the cloud skills gap is vital for success – particularly within the likes of financial services, telecoms and manufacturing.
Looking beyond degrees to gain quality talent
When it comes to finding the talent, more are looking outside of university-educated candidates in order to fill the demand. One of the main reasons for this is that school and university curriculums are also struggling to keep up with the rate of change. As a result, what students are learning is often out of date by the time they can put it into practice. The future lies in cloud computing, but the industry will continue to suffer if the school curriculum isn’t continually reviewed and updated.
For anyone to develop their cloud skills and enter the industry, there are a number of training and certification courses available. Many businesses view these as reputable qualifications, enabling prospective employees to elevate their skills and expertise to gain a competitive edge. Importantly, beginner cloud computing courses provide a broad introduction to all aspects of the industry, helping people to learn the fundamentals. Once a candidate has completed an introductory course, they can then look to more advanced training programs that delve further into specific areas of the field, dependent on what their interest is and the career path they want to take.
The key skills to invest in
Which skills are needed will depend on the organization, but knowledge of the basics including cloud service platforms, programming languages such as Python, and application programming interfaces (APIs) will always help. Hybrid cloud skills are also worth investing in, with recent Canonical research finding that 83% of respondents are now using hybrid or multi-cloud architecture, and too few organizations currently invest in these skills.
Kubernetes, the open source system for managing containerized applications, is another important skill: it is rapidly crossing into the mainstream and enables business leaders to deliver microservices in a way that cuts costs. DevOps models, where development and operations teams work closely together, can help to manage cloud infrastructure, particularly among organizations that choose to manage cloud infrastructure on their own rather than opting for a managed service.
Whether a business is hiring new talent or developing and upskilling its existing talent, there is one key attribute to look out for that’s far more important than any skill – a willingness to learn. Candidates who are already masters of multiple frameworks, skills and languages may be able to learn new skills more easily, but the willingness to engage with new technologies often cannot be taught. Having contributed to open source projects is usually good evidence of this crucial ability to learn. Generally speaking, it also pays to hire people who can build applications, rather than dozens of project managers, as any program to upskill talent will be built around hands-on experience.
Developing a skills program
As the newest generation of technology is created, developers, engineers, security professionals, DevOps team members, operations teams, and more must continually learn and master how to work with them. To support this, businesses must implement a skills program. This can be done in many ways and can be as simple as encouraging teams to watch tutorials on YouTube. There are also external experts that can be brought in to lead training sessions and workshops. If a small team within an organization works on using new technology to solve an existing problem, excitement will spread throughout the organization. It’s down to leaders to create opportunities for their teams to apply new technologies to new projects.
Another approach is to partner with a vendor. An organization should choose one that is familiar with cloud-native technology and open source communities. The right vendor can help to manage infrastructure and applications as a workforce upskills, targeting training to the right people as well as overseeing the open source software required.
A changing world
The cloud computing market is ripe with technological advancements, but to ensure they can reap the benefits, businesses need to have the right team in place. To do so, they need to attract the right talent. Companies should look to apply a degree of science to their hiring process – such as using advanced analytics to provide hiring teams with data they can use to help identify suitable talent. This is something we have implemented at Canonical, with our talent acquisition teams taking a full 360 approach. For example, it isn’t just a candidate’s qualifications that are taken into consideration; their behaviors are also analyzed to ensure they are the right person for the role.
Attracting the right talent also comes down to students being taught the skills needed to succeed in today’s world of modern work. In the longer term, businesses need to work with the education sector to ensure these skills are being developed. In the near future, organizations need to focus on self-teaching, online courses, and spreading enthusiasm for these exciting technologies within their organizations. Getting hands-on is the best way to learn.
We’ve featured the best online learning platform.
This article was produced as part of TechRadarPro’s Expert Insights channel where we feature the best and brightest minds in the technology industry today. The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/news/submit-your-story-to-techradar-pro
Samsung’s Galaxy S24 Ultra really is scratch resistant
Photo by Allison Johnson / The Verge
One of the most impressive parts of Samsung’s new Galaxy S24 Ultra is the anti-glare display, which is made of Corning Gorilla Armor glass that Samsung touts as its “most scratch-resistant yet.” Although it’s easy to dismiss that claim as marketing speak, a new durability test from JerryRigEverything proves Samsung really isn’t exaggerating after all.
During his video, JerryRightEverything tests the S24 Ultra’s durability by scratching the screen with different picks according to Mohs hardness scale — ranging from the softest materials at level one and the hardest at level 10. The YouTuber’s pick only started leaving scratches at level seven, but it didn’t create grooves in the glass that typically start appearing at that level.
“Normally, I can feel the tiny tip of my pick catch on the glass as it’s fracturing its way into the surface, but this time around I can see lines that cannot be rubbed off,” JerryRigEverything says during the video. “I don’t feel the same fracturing or catching or grooves that I feel with other phones at level seven.”
Instead, JerryRigEverything’s pick only starts leaving deeper grooves at level eight. He even takes a microscope to get a closer look at how the S24 Ultra fared against his picks and noticed nicks at level seven, while his pick took away chunks of glass on level eight. Previous durability tests from JerryRigEverything found that the displays on both the iPhone 15 Pro Max and the Samsung S23 Ultra started getting deeper grooves at level seven. This means the S24 Ultra’s display should be even more resistant to micro scratches that occur in day-to-day life.
In addition to sporting Corning Gorilla Armor, the S24 Ultra’s display also comes with an anti-glare coating my colleague Allison Johnson says “is impressive and truly helpful on a bright day.” It also features a titanium frame and a trove of AI tools, but all that comes with a new and higher price of $1,299.
Photo by Allison Johnson / The Verge
One of the most impressive parts of Samsung’s new Galaxy S24 Ultra is the anti-glare display, which is made of Corning Gorilla Armor glass that Samsung touts as its “most scratch-resistant yet.” Although it’s easy to dismiss that claim as marketing speak, a new durability test from JerryRigEverything proves Samsung really isn’t exaggerating after all.
During his video, JerryRightEverything tests the S24 Ultra’s durability by scratching the screen with different picks according to Mohs hardness scale — ranging from the softest materials at level one and the hardest at level 10. The YouTuber’s pick only started leaving scratches at level seven, but it didn’t create grooves in the glass that typically start appearing at that level.
“Normally, I can feel the tiny tip of my pick catch on the glass as it’s fracturing its way into the surface, but this time around I can see lines that cannot be rubbed off,” JerryRigEverything says during the video. “I don’t feel the same fracturing or catching or grooves that I feel with other phones at level seven.”
Instead, JerryRigEverything’s pick only starts leaving deeper grooves at level eight. He even takes a microscope to get a closer look at how the S24 Ultra fared against his picks and noticed nicks at level seven, while his pick took away chunks of glass on level eight. Previous durability tests from JerryRigEverything found that the displays on both the iPhone 15 Pro Max and the Samsung S23 Ultra started getting deeper grooves at level seven. This means the S24 Ultra’s display should be even more resistant to micro scratches that occur in day-to-day life.
In addition to sporting Corning Gorilla Armor, the S24 Ultra’s display also comes with an anti-glare coating my colleague Allison Johnson says “is impressive and truly helpful on a bright day.” It also features a titanium frame and a trove of AI tools, but all that comes with a new and higher price of $1,299.
Epic preps its challenge to Apple’s ‘bad-faith’ outside payments changes
Illustration by Nick Barclay / The Verge
Epic is not pleased with how Apple has responded to court orders. It thinks Apple’s new 27 percent tax on developers that link to non-Apple payment methods defies a court order to let developers provide those links and yesterday notified the court that it plans to lay out exactly how.
To refresh, District Court Judge Yvonne Gonzalez Rogers ordered Apple in 2021 to let developers link to outside payment methods, and it immediately appealed (despite having called it a “resounding victory”). Apple’s final appeal of the court order was denied earlier this month, and the company was forced to change its tune on in-app payments. But it barely did so — the 27 percent commission isn’t much less than Apple’s 30 percent in-app payments fee, while other requirements for allowing outside payment links are so onerous that developers may not want to do so. For instance, developers will have to create transaction reports for Apple every 15 days so the company can make sure it’s getting its money.
Epic CEO Tim Sweeney vowed to challenge what he called “bad-faith” compliance after Apple announced its App Store changes that included the fee. Now, as Bloomberg reports, his company will ask the Northern California US District Court in Oakland to step in.
Epic’s lawyers noted in the new filing that the court had left the door to this case cracked open for Epic to “apply for sanctions or other relief that may be appropriate” if it feels Apple had violated the court order. And now, they say the company is “in the process of meeting and conferring with Apple regarding a briefing schedule” for the yet unfiled motion.
A former antitrust trial attorney for the US Department of Justice told The Verge earlier this month that it wasn’t likely the court would side with Apple if Epic chose to challenge these terms. Judge Gonzalez Rogers had mentioned the possibility of such a commission in her 2021 court order and even the compliance reporting. But while she may have been fine with Apple taking that ball and running it in, now we’ll find out if its subsequent “Lambeau Leap” into the waiting arms of commerce has taken Apple too far.
Illustration by Nick Barclay / The Verge
Epic is not pleased with how Apple has responded to court orders. It thinks Apple’s new 27 percent tax on developers that link to non-Apple payment methods defies a court order to let developers provide those links and yesterday notified the court that it plans to lay out exactly how.
To refresh, District Court Judge Yvonne Gonzalez Rogers ordered Apple in 2021 to let developers link to outside payment methods, and it immediately appealed (despite having called it a “resounding victory”). Apple’s final appeal of the court order was denied earlier this month, and the company was forced to change its tune on in-app payments. But it barely did so — the 27 percent commission isn’t much less than Apple’s 30 percent in-app payments fee, while other requirements for allowing outside payment links are so onerous that developers may not want to do so. For instance, developers will have to create transaction reports for Apple every 15 days so the company can make sure it’s getting its money.
Epic CEO Tim Sweeney vowed to challenge what he called “bad-faith” compliance after Apple announced its App Store changes that included the fee. Now, as Bloomberg reports, his company will ask the Northern California US District Court in Oakland to step in.
Epic’s lawyers noted in the new filing that the court had left the door to this case cracked open for Epic to “apply for sanctions or other relief that may be appropriate” if it feels Apple had violated the court order. And now, they say the company is “in the process of meeting and conferring with Apple regarding a briefing schedule” for the yet unfiled motion.
A former antitrust trial attorney for the US Department of Justice told The Verge earlier this month that it wasn’t likely the court would side with Apple if Epic chose to challenge these terms. Judge Gonzalez Rogers had mentioned the possibility of such a commission in her 2021 court order and even the compliance reporting. But while she may have been fine with Apple taking that ball and running it in, now we’ll find out if its subsequent “Lambeau Leap” into the waiting arms of commerce has taken Apple too far.
Lamborghini will make hybrid versions of all its cars to cut its CO2
2024 will see the launch of a hybrid to replace the Hurácan, as well as a hybrid Urus.
Enlarge (credit: Lamborghini)
When we think of Lamborghini, it’s hard not to think of sonorous, multi-cylinder, naturally aspirated engines. Long after Ferrari added turbochargers to its powerplants, its Italian rival from Sant’Agata Bolognese opted to stick with larger-capacity lumps that sounded symphonic throughout their rev ranges. But those aren’t entirely consistent with Lamborghini’s goal of reducing its fleet emissions by half in 2025, or by 80 percent in 2030. To that end, the brand will bring hybrid versions of all its models to market, Lamborghini CEO Stephan Winkelmann said.
“Last year we celebrated our sixtieth anniversary with the presentation of our first plug-in hybrid car, the Lamborghini Revuelto,” explained Winkelmann. “We had the presentation in summer of our race car, the LMDh car, which is going to race in Doha the first weekend in March. And then Pebble Beach in August,” he continued, where the brand showed off Lanzador, a concept of its first battery-electric car, which is due in 2028.
In October, Ars visited Lamborghini in Italy to learn more about how the supercar maker has been making its car production more sustainable—including the increased use of rail for freight shipping, more use of reusable and recycling waste materials from production, and even a biomass reactor that generates natural gas that powers much of the factory. In addition to cutting the emissions of its cars, the company wants to reduce the CO2 emitted during production by 40 percent by 2030.
Meet the startup taking on Nvidia
Today on Equity, Plex targets profitability, Rebellions aims to take on Nvidia and Nile is building a new data system for SaaS.
© 2024 TechCrunch. All rights reserved. For personal use only.
Today on Equity, Plex targets profitability, Rebellions aims to take on Nvidia and Nile is building a new data system for SaaS.
© 2024 TechCrunch. All rights reserved. For personal use only.
Diablo IV Lunar Awakening Event – everything you need to know
As we approach the Lunar New Year, Diablo IV is gearing up for the celebrations and we will be getting
The post Diablo IV Lunar Awakening Event – everything you need to know appeared first on ReadWrite.
As we approach the Lunar New Year, Diablo IV is gearing up for the celebrations and we will be getting a new Lunar Awakening event for a limited period in Sanctuary. Season 3 is already underway but what will this new event hold, when will it run, and will it be worth the time to complete it? Let’s see what we know.
When is Diablo IV’s Lunar Awakening event?
Starting on February 6th to tie in with the Lunar New Year, Lunar Awakening will run for two weeks until completion on the 20th of February.
What are the Lunar Awakening rewards?
This is the bit you are really here for – what loot can you get your hands on? Blizzard says, “There are 10 Ancestor’s Favor reputation levels in total to earn, and 6 different Lunar-themed cosmetic rewards to unlock. Lunar Awakening-themed garments will also be available in Tejal’s shop, materializing to adorn your wanderer in threads befitting this joyous occasion.”
As you can see from the image, some of these are quite desirable,
What are Lunar Shrines in Diablo IV?
The Lunar Awakening event will bring with it several new Shrines scattered throughout Sanctuary. These will replace some of the regular Shrines in the game until the event is completed. Blizzard describes the Shrines as having “extra punch”, and this is what you can expect from these new points of interest.
Artillery Shrine – Casts have a chance to summon a holy bomb.
Blast Wave Shrine – Each explosion summons a cluster bombardment.
Channeling Shrine- Increased attack speed and a chance to reset cooldowns.
Conduit Shrine – Summon frequent, powerful, shocking strikes.
Greed Shrine – Chance to summon a Treasure Goblin. While the Shrine is active, 25 kills summons a Treasure Goblin, and 50 kills summons a second.
Lethal Shrine – Chance to instantly execute a struck monster, causing Fear on surrounding monsters. Note: this includes Elites, but excludes Bosses and other Players.
Protection Shrine – You reflect all incoming damage. Damage reflected scales with Level and World Tier.
Can you play Lunar Awakening without a Season Pass?
Indeed you can. The Lunar Awakening event will be present in both the Eternal and Seasonal Realms of the game.
How to start Lunar Awakening in D4
Once the event has started on February 6th, travel to Ked Bardu and travel to the Northern section of the town. Once there, interact with Ying-Yue, the leader of the Lunar Night Market. This is the hub for the event.
The post Diablo IV Lunar Awakening Event – everything you need to know appeared first on ReadWrite.
The most streamed TV shows of 2023 may surprise you
Amongst them is “Bluey” and “Suits” – the latter beating a record “The Office” held.
TV streaming records were broken in 2023, with some surprising shows named as the most streamed in the U.S. last year, according to media audience measuring firm Nielsen.
In Nielsen’s new report tracking American streaming habits over the year, Suits was crowned a winner as 2023’s most popular TV show on streaming.
Suits beat a previous record held by NBC’s The Office, which was streamed for 57.1 billion minutes in 2020. Despite running from 2011 to 2019, Aaron Korsh’s legal drama saw a massive resurgence in viewership last year, being streamed a whopping 57.7 billion minutes on Netflix after it was added to the platform in June last year. The series famously saw the screen breakthrough role of Meghan Markle, Duchess of Sussex.
The second most-streamed show of last year was the animated children’s hit Bluey, clocking up 43.9 billion minutes on Disney+.
Other older sitcoms and dramas comprise much of the rest of the most-streamed list: the rest of it, successively, is NCIS, Grey’s Anatomy, Cocomelon, The Big Big Theory, Gilmore Girls, Friends, Heartland, and Supernatural. Four of the 10 ten most streamed TV shows on the list are currently on Netflix exclusively, while other three titles stream on Netflix and a few other platforms – like Suits, which appears on both Netflix and Peacock.
None of the top 10 streamed shows originally aired on the streaming platforms where they took off in 2023, which is notable given the year was dominated by the Hollywood writers strikes. However, Apple TV+’s Ted Lasso garnered the most viewership for an original series, with 16.9 million minutes for its third and final season. Netflix’s The Night Agent, Ginny and Georgia, Virgin River, and Love Is Blind rounded out the top five originals. But none of these shows, including Ted Lasso, were in the overall top streamed list.
Of course, just because something’s popular doesn’t make it…good. Here’s Mashable’s picks for the best TV shows of 2023, regardless of their viewership numbers.