Friday, March 31, 2023

Zenoss introduces monitoring capabilities for Kubernetes

Zenoss has launched a free trial for monitoring Kubernetes, the de facto standard platform for running containers in production at scale, including in on-prem and cloud environments.

This real-time monitoring of Kubernetes streaming data is another advancement of the Zenoss unified monitoring vision.

The Zenoss monitoring capabilities for Kubernetes enable customers to:

  • Begin monitoring in minutes with no training required for operations personnel.
  • Leverage secure, cloud-based monitoring with zero install.
  • Gain insights for Kubernetes clusters in a single pane of glass along with the broader infrastructure for those deployments in AWS, Azure and Google Cloud, as well as in private or hybrid clouds and on-prem environments.
  • Get complete visibility into the health and performance of nodes, services, pods, containers, namespaces and more.
  • Immediately access actions, notifications and intelligent dashboards with out-of-box templates.

Zenoss Cloud is the AI-driven full-stack monitoring platform that collects all machine data, enabling the emergence of context for preventing service disruptions in complex, modern IT environments.

Zenoss Cloud leverages the most powerful machine learning and real-time analytics of streaming data to deliver AIOps, giving companies the ability to scale and adapt to the changing needs of their businesses.

This addresses the significant challenges organizations experience related to monitoring tool sprawl. As new technologies are deployed, typically, new monitoring tools are deployed to monitor them.

Over time, this results in most companies having dozens or more monitoring tools, which means monitoring data is in silos and there is little or no ability to ensure the health and performance of IT services.

Zenoss Cloud enables visibility into container orchestration systems, like Kubernetes, along with all other infrastructure supporting the applications being delivered by the systems.

“Containerized applications have become a staple in modern enterprise IT environments,” said Trent Fitz, chief product officer at Zenoss.

“Yet most deployments are inefficient due to a significant lack of visibility into the health and performance of all Kubernetes components. The insights Zenoss Cloud provides dramatically improve the ability of organizations to maximize the benefits of their Kubernetes environments,” Fitz concluded.


from Help Net Security https://ift.tt/mY0HyXJ

Why You Shouldn't Gloat (Even When It Feels Good)

Are you gloating today? Have recent events filled you with a triumphant and malicious satisfaction, a sense of gratification or delight, a desire to rub it in someone else’s face? Maybe you’re Photoshopping prison bars onto photos of a certain political figure and posting them to your long-dormant Facebook account so distant relatives can see how happy you are?

I get it. A lot of us have hoped for the indictment of Donald Trump for a long time. But while I don’t want to scold anyone for enjoying some deserved schadenfreude, there’s a right and a wrong way to gloat, and being too publicly happy about Trump’s indictment is a little unseemly, and could come back to haunt you.

There is no polite way to gloat

Gloating, as it’s popularly understood and practiced, requires someone to direct your gloating at, and the desired result is to make the other person feel bad. Gloating to a friend after his team loses a football game to your team is only mildly annoying—it’s just a game, after all—but politics in 2023 actually means something to everyone.

As weird as it is that some nobody in Ohio would feel a personal, emotional connection to a national political figure, they do. There are well-funded, efficient networks of public relations experts, tech moguls, political insiders, and foreign intelligence agencies working 24/7 to make that happen—to get people to feel an emotional attachment to political figures they’ll never actually know anything genuine about—and to make people hate others who feel differently.

People tend to vote, join political parties, and form opinions based on how they feel, not what they think. This is true across the map. It’s true of people who like Donald Trump, people who like Joe Biden, and people who like Bernie Sanders.

If you’re thinking, “Good. Supporters of Trump should feel bad. They’re awful,” maybe you’re right. They would say the same about you, I’m sure. I can only imagine the gross celebrations that would unfold in some circles if they (meaning the GOP) ever actually succeeded in locking up Hilary Clinton. But you can’t do anything about other people. You’re better than they are, right? To steal a line from Michelle Obama (who I’ve apparently been manipulated into respecting and liking), “When they go low, we go high.”

If gloating is a way to make yourself feel satisfaction about the fact that someone you hate is suffering, you’ve probably succeeded today. But you haven’t actually done anything worthwhile. Chances are you’re only reinforcing the sense of tribal identity that keeps us at each other’s throats.

An alternative to gloating

“Going high” in this context would involve actually trying to change people’s minds. The reason I don’t like Trump, and I’m happy he’s being charged with over 30 felonies, is because I disagree with his political goals and the way he conducted himself in office. I think the country would be vastly worse off if he were elected again. This is why I’m more committed to changing people’s minds than to making myself feel good about a “victory” over someone I will never meet.

If you’re trying to get your MAGA uncle to consider maybe not voting for the worst human being in American political history, gloating is counter-productive. Psychologists who study how people actually change their minds point out that making yourself into the enemy (i.e. gloating) is the worst thing you can do in that regard.

As David McRaney, author of the 2022 book How Minds Change: The Surprising Science of Belief, Opinion, and Persuasion told Time, “If you communicate that they should be ashamed, or that they’re stupid or gullible, they’re going to push against you in a way that ruins the possibility of moving forward to a conversation that would actually change their mind in some way or get them to reevaluate the matter.”

The actual keys to productive mind-changing are pretty much the opposite of gloating: remaining calm, using empathy, finding common ground, and inviting introspection are much more effective means of getting people to come around to your point of view (or at least become too discouraged to bother voting in 2024). It’s a much harder thing to do than to calling someone a sucker, but it could work. Theoretically. Or so they say.

There’s a good possibility you are celebrating prematurely anyway

Trump being indicted sends us into historically uncharted waters. No one has any idea how this will play out. Maybe it actually will help his chances in 2024. Maybe it will sink them entirely. Maybe he’s the best possible candidate for Biden to run against. Maybe it’s the beginning of a new civil war. We don’t know anything right now, and uncertainty is nothing to celebrate.

We don’t even know specifically what Trump is being charged with. Many legal experts surmise that the case against him is based on an untested legal theory, and that makes a conviction anything but a done deal—and even that’s all speculation until the charges are released. It’s well within the realm of possibility that Trump will walk from this case and go back to posting on Truth Social about the conspiracies arrayed against him. He might not end up facing charges from the grand juries looking into his election meddling, stolen documents, or efforts to incite an insurrection either. There are just too many unknowns.

He might be tried, convicted, go to jail, and win a presidential election anyway. There’s no law that prevents that. It’s an unlikely scenario, but a transparent conman like Donald Trump becoming a national political figure in the first place was unlikely too, yet here we are.

It’s just too soon to take a victory lap, and there’s nothing worse than walking back a gloat. Picture the look on your red-capped cousin’s face at Thanksgiving if Trump winds up leading the country from a jail cell. You’d literally never hear the end of it.

If you really must gloat…

Being happy that something bad is happening to one of the most onerous humans alive is natural and healthy. But the best way to gloat is to do it privately. Take a lesson from the president: Joe Biden has steadfastly avoided making any public statements about Donald Trump in favor of doing his job, He’s keeping it quiet, focusing on being the change instead of blathering. Still, I’d bet money all his friends are blowing up his phone with Trump-in-prison memes. (There are, admittedly, a bunch of good ones going around.)


from Lifehacker https://ift.tt/ZsqYItT

Those Roku Ads Are Just a Setting, Actually

Photo: renata colella (Shutterstock)

No one likes ads, especially when they get in the way of what you’re actually trying to do. I doubt a single Roku user wants to see obtrusive banner ads while they’re looking for something to watch (unless you wanted to DoorDash dinner from your TV?), but what can you do? Roku wants to show you ads, so ads there shall be. Except, there is something you can do about it, thanks to a hidden settings menu.

This tip comes to us from the distinguished Redditor iSniffMyPooper, who posted about removing Roku ads in r/LifeProTips. According to Sniffy, all you need to do to find the secret ad settings menu is use Roku’s version of the Konami Code—a simple sequence of button presses that unlocks something hidden and useful. However, instead of giving the user 30 extra lives, this secret code keeps you safe from unnecessary UI ads. Here’s how to enter it:

  1. Fire up your Roku and open the home screen.
  2. Press the home button five times.
  3. Press up, right, down, left, up. This should launch the hidden settings menu.
  4. Set Cycle scrollable ads to “Always Disabled.”
  5. Set Cycle home screen ad banner server to “Demo 3.”
  6. Turn your Roku off and on again (may require more than one power cycle to work).

You can go one step further and hide many other elements from the home screen by heading to Settings > Home Screen, then choosing “Hide” next to each option you don’t want to see.

Redditors in the thread were, understandably, thrilled by the tip. (“Thank you poop sniffer.”) Others noted this is labeled Secret Menu #2, implying there’s a Secret Menu #1. And there is: As another Redditor points out, there are many secret settings menu your Roku doesn’t advertise (pun not intended, but happily recognized). You can check out a list of those settings menus (and how to access them) here.

You also don’t have to live with any of the channels Roku insists on making default. Check out our guide to learn how to clean up your home screen and keep only the channels you actually watch front and center.


from Lifehacker https://ift.tt/uTl1IHb

The Out-of-Touch Adults' Guide to Kid Culture: Are We Too Thirsty for Pedro Pascal?

This week, young people are partying like it’s 1999: buying dumb-phones, spending cold hard cash, and listening to Afroman novelty raps. On the more serious side of things, the internet is creeping on actor Pedro Pascal, amplifying unfounded rumors, and dealing with the hidden challenges of having a sibling with a disability.

The internet is getting really weird about Pedro Pascal

This week, our new best pals at Mashable examined the increasingly creepy parasocial relationship between the online world and its new “daddy,” Pedro Pascal, star of The Last of Us and The Mandalorian. The question: Has the internet gone too far this time? The answer: Yes, of course. The internet has always gone too far. But this time it’s really too far. The millions of thirst tweets are creepy. This widely shared deep-fake video of Pascal saying “I am your cool, slutty daddy” is even creepier. But maybe creepiest of all is this clip of Entertainment Tonight asking Pascal to read “thirst tweets” about himself on the red carpet. Awkward doesn’t do it justice.

So what’s going on here? A lot. it’s a cultural collision touching on issues of gender, fandom, celebrity, sexuality, the eternal September of online life, and way more. Check out this excellent discussion in which Chase DiBenedetto and Elena Cavender chop it all up like a pop cultural food processor.

Don’t freak out about April 24, which is not “National Rape Day”

If a younger person in your life is getting anxious about April 24 looming, reassure them that, no, it’s not “national rape day.” According to the rumor that has spread every year around this time since 2021, April 24 is “The National Day of Sexual Assault,” the day upon which shadowy men plan on committing any number of felonies. Where did this idea originate? Supposedly, six men started spreading videos promoting the day in 2021, then others jumped on the trend, encouraging each other and spreading tips. Except there is no trace of any of those videos online, nor any evidence they ever existed. I can’t find any evidence of anyone actually supporting the day, with the exception of a screenshot of a since-deleted entry on Urban Dictionary posted in 2019.

There are, however, lots of videos warning people about the date and decrying the very bad people behind it. The makers of these videos mean well, but are spreading misinformation and fear. Sexual assault is a horrible problem that everyone should be aware of and work to prevent, but it’s not any worse or more common on April 24. (For what it’s worth, April 24 is actually National Pigs in a Blanket Day.)

What is “glass child syndrome?”

A growing community on TikTok is discussing “glass child syndrome,” a description of the siblings of children with with disabilities who feel their parents “saw through them” throughout their childhoods. The term was coined in 2010 by Alicia Arena, and it describes an often overlooked demographic. Glass children are often expected to be caretakers for their siblings. Their problems are often minimized, and their entire family’s lives often revolve around the needs of their siblings.

According to Arena, “glass children take on these caretaker responsibilities and naturally we are conditioned not to have any problems. We are supposed to be perfect. When someone asked us how we were doing, the answer was always: I’m doing fine.” This is a case of technology having made it easy for people who once suffered alone to find each other and offer understanding and support, so maybe we shouldn’t ban TikTok?

The return of dumb phones and hard cash

Younger people are rediscovering a couple of old-school classics lately: Dumb phones and cash money. Gen Z influencers are touting old school flip-phones as a way of controlling screen time and companies like Punkt and Light are serving up bespoke versions of the product (dubbed “minimal phones”), and kids are starting to take the bait. A little. There hasn’t been a huge spike in dumb phone adoption, but maybe it’s the beginning of an encouraging trend.

Money, in the form of pieces of paper you can trade for goods and services, is also making a comeback among young people. The hashtag #cashstuffing details the very old-school budgeting strategy of putting cash in envelopes marked “rent,” “food,” or “illegal drugs.” It’s perfect for a time of inflation: it keeps you from overspending, makes you more aware of what you have left, and prevents you from dipping into your credit. On the negative side: it isn’t secure, takes time, and offers no interest or other return. But for young people who often don’t have much money anyway and probably didn’t learn basic home finance in school, it’s definitely a net-positive.

Viral videos of the week: Afroman’s unexpected comeback

Rapper Afroman, creator of early-aughts novelty hit “Because I Got High,” is going viral this week, introducing a new generation to his unique talents and vibe. Videos for two of Afroman’s songs are spreading quickly because he’s being sued by the police. Last August, the sheriffs department in Afroman’s Ohio county searched his place looking for narcotics and a kidnapping victim. They found neither, but they left Afroman a huge gift: incredible footage of armed men casually rummaging through his things and finding nothing but a lemon cake baked by Afroman’s mom. Afroman used the footage in a couple of videos a few month ago, but not many people noticed. Until this week, when members of the Adams County Sheriff’s department filed a lawsuit against the rapper. They say they suffered “humiliation, ridicule, mental distress, embarrassment and loss of reputation.” Oh no.

Anyway, the videos are hilarious and hundreds of thousands of people would be unaware of them if it wasn’t for the excellent promotion the Sheriff’s Department provided. In “Will you Help Repair my Door?” Afroman asks a series of reasonable questions to the police, and in “Lemon Pound Cake,” one cop’s hungry reaction to a delicious treat is scrutinized.


from Lifehacker https://ift.tt/GsYg9ve

What Happens When You Get Indicted

Home Alone 2: Lost in New York star Donald Trump has been indicted by a Manhattan grand jury. While the indictment remains under seal, and we don’t officially know the specific charges, it is believed to involve Trump’s hush payments made to adult-film actress Stormy Daniels ahead of the 2016 election.

This is the first time in U.S. history that a current or former president has faced criminal charges. This is uncharted waters for our political system, and the question on everyone’s mind is: What now? If you’re the former president reading this, or if you’re facing an unrelated indictment of your own (so sorry your thunder has been stolen), here’s what you can expect.

What is an indictment?

First things first, let’s clarify what an indictment is—and what it is not. An indictment issued by a grand jury means there is formal accusation that a person has committed one or more crimes. To obtain an indictment, prosecutors must present an adequate basis for criminal charges to a grand jury in a secret proceeding. A grand jury indictment is required for all federal felonies.

(Side bar here: “Grand jury” isn’t called that because it means “special” or “important” jury. It derives its name from the fact that it usually has a greater, or grander, number of jurors than a trial jury.)

An indictment is not a conviction. That being said, federal prosecutors are highly successful in convicting the vast majority of people indicted. Pew Research Center showed in 2019 that federal prosecutors’ conviction rate is over 99%.

There is also a difference between being indicted versus being charged. Both are steps in moving a criminal case toward trial, but the main difference is grand juries file indictments and prosecutors file charges. PrisonProfessors explains that not all charges result in a formal indictment, but all indictments contain charges.

The path from indictment to final resolution can take years, so let’s take a look at what we can expect now.

What happens after an indictment?

The next step following the grand jury indictment is the arrest. More specifically, after prosecutors secure an indictment, they must obtain an arrest warrant.

As to what that arrest physically looks like for a certain someone this week? According to the New York Times, while most defendants arrested on felony charges get handcuffed, “it is unclear whether an exception will be made for a former president.” For instance, it’s typical for some white-collar defendants to have their hands secured in front of them, as opposed to the classic behind-the-back look.

Trump posted earlier this week that he would be arrested, but as the Washington Post points out, he also has the option to voluntarily turn himself in—thus avoiding the need for law enforcement to physically bring him into custody.

What are the next steps?

To review: First step, indictment—check. Next up, the arrest (or voluntary surrender). Here are the next steps to get to a final resolution, as outlined by the Washington Post.

Process as a defendant. Finger printing, mug shot, the whole nine yards. Whether Trump gets arrested or turns himself in, he’s getting that mug shot.

Arraignment. A person accused will typically appear before a federal Magistrate Judge within 24-72 hours after the arrest. This is the public court appearance where the defendant enters a plea of guilty or not guilty. Usually it’s “not guilty.” Trump is expected to appear in court on Tuesday.

At Trump’s arraignment, a judge will determine whether the former president needs to pay bail or adhere to certain restrictions pending a trial—or whether he could be released with no bail or restrictions, aka “released on personal recognizance.”

Pretrial hearings. This is where the defense motions to dismiss charges, exclude evidence, request witnesses, and so on.

The trial. This is the main show, where the defendant is either found not guilty (and acquitted of all charges) or guilty (and sentenced accordingly). It looks like Trump’s upcoming court battle will be the backdrop of his third bid for the presidency in 2024. This is not a typical feature of most criminal proceedings, so if you were just indicted and feel insecure about your shot at the presidency, don’t be too hard on yourself.


from Lifehacker https://ift.tt/CoiAHeS

Celebrate With a Well-Timed Free Cone From Ben & Jerry’s

Photo: Kate33 (Shutterstock)

Monday, April 3 will mark the 45th year since Ben & Jerry’s started giving free ice cream for their “Free Cone Day” celebration. A tradition that began the same year people first started walking the streets with Walkmans is coming back after a four-year hiatus during COVID-19, according to Today. Here is what you need to know.

Are the ice cream cones really free?

The ice cream will, indeed, be free. There are no strings attached or backdoor tricks to get you to sign up for a rewards program. Just know that any add-ons, like toppings or waffle or dipped cones, are extra. The motive behind the day is to “celebrate their first year in business and thank the local community for their support,” according to the company’s press release.

The great news for ice cream fans is that there is no limit to how many times you can get in line to receive the free cones (or a cup, if that’s your style)—if you have the time and patience to make the line more than once, that is. (The lines can get pretty long in some locations.) 

Ben & Jerry’s website says the free cones will be served from noon to 8 p.m., so make sure to get there early if you think your local store will get packed. According to the Krazy Coupon Lady, some locations might have groups raising money and giving front-of-the-line passes.

You can get any flavor that is available. If you’re racked with indecision, you can take this ice cream personality quiz that will recommend a flavor for you. Otherwise, here is a list of all of Ben & Jerry’s flavors—just know that your local store might not be carrying them all.

How can I find participating Ben & Jerry’s?

You can use this map to type your location and see all the Ben & Jerry’s near you. Since this is a world-wide event, if you happen to be reading this from outside the U.S., the map will also show you international locations where you can get your free cones.

Although most stores will be participating, Ben & Jerry’s recommends you double-check with your local store to make sure.


from Lifehacker https://ift.tt/hmj1Ure

Turn Cottage Cheese Into a Creamy, Protein-Packed Pasta Sauce

Cottage cheese is important to me. Without it, I would devolve into a hangry, pouty pile of woman, and I would definitely have a hard time meeting my daily protein goal—a goal I am still getting used to, even after a year of weight training. The concept of eating to get stronger feels novel, which is weird because that’s really the whole point of food.

I shovel cottage cheese into my mouth to feed the beast within, but I also genuinely enjoy it. It makes a perfect no-cook breakfast, it looks absolutely gorgeous when whipped, and it does some pretty incredible things when added to a batch of pancakes. It’s also loaded with protein and, when combined with evaporated milk, makes a creamy, surprisingly indulgent pasta sauce.

Cottage cheese pasta sauce packs in the protein

In terms of protein content, this sauce contains a not insignificant amount—much more than you would get in a jar of store-bought alfredo. This recipe makes a little over two cups of sauce, with a total protein content of 34 grams, while the same amount of Kroger brand jarred alfredo clocks in at a mere 8 grams. But even if you don’t have “protein goals,” it’s worth making, because it’s simple and delicious.

There are a few versions of cottage cheese sauce floating around the internet. Some consist of blended cottage cheese and nothing else, but I found that those tend to clump and coagulate if not heated just so, and I rarely do things in a way that could be described as “just so”. Instead, I used a 50/50 mixture of cottage cheese and evaporated milk. It ruled.

This sauce is creamy and luscious, and easy to make and work with. All you do is blend the two ingredients together, then doctor with flavorings as you see fit. I added salt, white pepper, a few shakes of MSG, and a healthy squirt of Dijon mustard to mine. (Dijon adds flavor, but it’s also an excellent emulsifier, which helped keep the sauce from separating.) You might also add Worcestershire sauce, nutmeg, paprika, or garlic powder, or blend a garlic clove right into the sauce—but be warned, because that will make the sauce aggressively garlicky.

Once blended, splash in some starchy pasta water and heat the mixture over medium-low heat until it thickens. Toss with your pasta of choice—gnocchi is a clutch move here—and enjoy.

Protein-packed cheesy pasta sauce

Ingredients:

  • About a pound of pasta, cooked just shy of al dente and drained, with 1/2 cup of pasta water reserved
  • 1 cup full-fat cottage cheese
  • 1 cup evaporated milk
  • 1/2 teaspoon Dijon mustard
  • 1/4 teaspoon fine salt
  • 1/4 teaspoon white pepper
  • Pinch of MSG

Blend all ingredients except for the pasta and pasta water in a high-powered blender or using an immersion blender until smooth. Add the sauce to a medium sauce pan with the pasta water and heat over medium-low heat until it’s thick enough to coat the back of a wooden spoon.

Add the pasta to the pot and toss to coat. Serve immediately with finely grated parm or pecorino if you so desire and enjoy those gainz, bro.


from Lifehacker https://ift.tt/54HJqtY

Thursday, March 30, 2023

Votiro raises $11.5 million to accelerate global expansion

Votiro has raised $11.5 million in a Series A funding round led by Harvest Lane Asset Management to accelerate its marketing and sales reach in North America.

Votiro is revolutionizing file security and safety by expanding its disarming with enhanced data detection and analytics capabilities and making them easily accessible as a browser- and cloud-based services.

Weaponized files are by far the most common and evasive attack vector into businesses of all sizes. They can enter through multiple enterprise, cloud, portal, 3rd party, and collaboration channels. Disarming, thus preventing attacks from landing on the endpoints, is a huge step in cyber defense. However, files also carry sensitive business data that can be compromised in use and pose operational and compliance related risks to an organization.

Through recent and forthcoming product innovations, Votiro is providing threat prevention and data privacy solutions to reduce complexity and enable greatly enhanced security outcomes. This expanding content awareness further enables deep content analysis not visible to other cyber defense layers. By incorporating these capabilities into the Votiro™ ZT Cloud, frictionless business interfacing is achieved complementary with any existing IT and Security deployments.

“Votiro is headed into 2023 on the heels of a strong 2022. Over the past year, we’ve doubled sales in the United States, released new capabilities, expanded our leadership team and Board, and forged new integrations with leading technology partners,” says Ravi Srinivasan, CEO of Votiro. “We have proven the customer value in expanding beyond disarming, and integrating solutions that deliver rich data security insights and analytics into the files and how they are used across the enterprise. This ensures security teams are prepared for known and unknown threats, at the speed of today’s high velocity digital business.”

“True zero trust content security in the cloud has changed how companies can think about protection from weaponized files,” says Chris Fedde, Chairman of the Board of Directors at Votiro. “It’s also changed how investors look at Votiro, as the company has now transitioned from strategic partner funding to institutional capitalization. As Votiro welcomes Luke Cummings to the board, his expertise in investment and value creation is made available to management.” This round consists of new capital and a loan to equity conversion, Fedde added. The round is being kept open due to discussions with other interested parties.

“I witnessed how companies worldwide are depending on Votiro to deliver completely safe files into their business flow. No other solution comes close to the Votiro ZT Cloud in content security and ease of use for all sizes of enterprises. That’s why we made the decision to lead the last round of capital raising,” says Cummings, Chief Investment Officer and Managing Director at Harvest Lane Asset Management. “I look forward to working more closely with Votiro and helping them continue on their upward trajectory.”

Earlier this year, Votiro appointed Alexander Gomez as VP, GTM Sales Strategy and Execution. Gomez joins Votiro with a proven track record of building hyper-growth digital revenue engines through previous positions held at both Alert Logic and Rackspace.


from Help Net Security https://ift.tt/Nt9xEVo

Russian Cyberwarfare Documents Leaked

Now this is interesting:

Thousands of pages of secret documents reveal how Vulkan’s engineers have worked for Russian military and intelligence agencies to support hacking operations, train operatives before attacks on national infrastructure, spread disinformation and control sections of the internet.

The company’s work is linked to the federal security service or FSB, the domestic spy agency; the operational and intelligence divisions of the armed forces, known as the GOU and GRU; and the SVR, Russia’s foreign intelligence organisation.

Lots more at the link.

The documents are in Russian, so it will be a while before we get translations.


from Schneier on Security https://ift.tt/79cUNKo

Set Up Your Phone to Keep You Focused During Workouts

There’s a stereotype of the phone-obsessed gym rat hogging equipment while they “just sit there and scroll on their phone.” Excuse me, I am logging my sets and trimming my training videos and, um, scrolling Reddit, and yeah I kind of got sucked into TikTok somehow? And there’s a work email, crap, it could wait until after but I’m really curious what it says. Just a sec while I open it...

Yeah, I’m not the only one who can get a bit distracted during a training session. I know you’re doing it too. So I love this tip from powerlifting coach Claire Zai about setting a “focus” on your phone for when you’re working out.

iPhones have a “fitness” setting as one of the options you get when you’re creating a new focus mode. This includes a trigger where it will turn on when you start a workout, but you can also enable it from the focus menu in Control Center anytime you like. We have more on how to enable focus modes in iOS here, and Androids have a similar feature.

With a focus mode, you can:

  • Only have certain apps on your home screen (you’ll choose ones that are fitness-related, of course)
  • Silence notifications from work or social apps (you’ll get those notifications when you exit the focus)
  • Set up a wallpaper with something helpful or inspirational, like a list of your goals or a motivational quote
  • Add widgets that you’ll find useful during your workout

So I set one up. On my fitness home screen, which you can see above, I have apps that I use to coordinate workouts, like Intervals Pro (a timer) and Polar Beat (which tracks heart rate via a chest strap on the occasions I want to do that). I also have music and podcast apps so I’ll have something to listen to, and Mideo to easily take videos even while music is playing. I chose a photo of weights for my wallpaper to remind myself that I’m in fitness mode.

Screenshot: Beth Skwarecki

Here’s another version, a bit more inspirational. I have a list of goals on the cover of my training journal; the lock screen here has a digital version. On the home screen, above the apps, I have a widget from the Countdown app telling me how many days until my next big competition.

You can trigger the fitness mode to turn on anytime you start a workout, or at a certain time or location—say, when you arrive at the gym. Or you can just start it from Control Center (swipe down from the top right corner of your phone) and tell your phone to keep it on for one hour, for as long as you’re at your current location, or until you turn it off. And now you have everything you need to get your workout done, without the distractions.


from Lifehacker https://ift.tt/9wikPKn

Beware This Nightmarish New Android Banking Malware

Malware is an unfortunate reality in the digital world we’ve built for ourselves. Since all of our devices run on code, bad actors can use malicious code to take over those devices, or install programs that steal information from them. However, some bad actors don’t write this code themselves. Rather, they pay others to lease out their malware, in what’s known as MaaS, or “malware as a service.” This latest Android malware is the most recent example we’ve seen, and it’s ugly.

As reported by TechRadar, the new botnet is dubbed Nexus, and first appeared on underground marketplaces in January of this year. Research from Cleafy, however, confirms the malware has been active since June 2022, and even contains similar code to another type of Android banking malware we saw in 2021. Since Nexus is MaaS, clients can pay $3,000 a month for Nexus access—a small price to pay for what the malware can give them.

Nexus is designed to scrape passwords from banking apps by keylogging (i.e., watching everything you type in order to discover your passwords), but that’s not even what makes it particularly dangerous. Even if those banking apps are protected with two-factor authentication, Nexus can bypass the security because it can take advantage of accessibility options that reveal SMS and Google Authenticator codes. It can even disable SMS-based 2FA once it steals the codes, making it extremely difficult for you to gain access to your account.

Once bad actors install Nexus onto your machine, the malware reports back to those actors through a C2 server, a technique that allows malicious users to maintain communications with malware after the initial installation. Because Nexus is a botnet, it works by connecting together many different infected devices on one network. Bad actors can monitor all the devices on their botnet, with easy access to the data they scrape from each.

Like the malware it is inspired by, Nexus is whitelisted from the Commonwealth of Independent States (CIS), including Azerbaijan, Armenia, Belarus, Kazakhstan, Kyrgyzstan, Moldova, Russia, Tajikistan, Uzbekistan, Ukraine, and Indonesia. Anywhere else, though, Nexus is allowed to thrive.

How does Nexus end up on your Android device?

According to Android Police, Nexus is “disguised as a legitimate app packing a malicious trojan on shady third-party Android app stores,” but there doesn’t seem to be any specific programs identified at this time containing the malware. That’s an issue, because it means we don’t know which program to avoid going forward.

Until more details about Nexus emerge, you’ll need to employ some best practices to avoid the malware, as well as other malware out in the ether. Unfortunately, that means avoiding apps from third-party market places unless you can 100% verify their safety. While a huge advantage to Android is the ability to sideload apps not found on the Play Store, malicious users take advantage of the practice to lace apps with malware. Be careful.

Of course, there are plenty of examples of malicious apps finding their way to the Play Store, as well. When choosing a new app to download, always comb through the listing with care, looking for anything out of the ordinary. Does the app’s description match its title, or screenshots? Is the copy written well, or is it riddled with errors? Check the reviews: Do users have genuine positive thoughts towards the app, or do they have complaints, like pop-up ads and false advertising?


from Lifehacker https://ift.tt/d0XzgMr

How to Spot the Worst Tourist Traps (and When to Just Give in and Visit Them)

We’ve all been ensnared by tourist traps, those vacation “must-sees” that turn out to be overcrowded, overpriced, and inauthentic should-have-skippeds. If you’re planning your summer vacation, here’s how to avoid the biggest and worst tourist traps, whether you’re traveling in the United States or internationally.

The key to avoiding tourist traps is preparation

By far the most effective way to identify and avoid tourist traps is to do some research before you leave. Guidebooks and travel websites can be good resources, but they can also be influenced by advertising and marketing, usually by the kind of places you’re trying to avoid. So the best way to research a destination is to talk to someone who lives in the place you’re visiting, or who used to live there. Reach out to your friends in real life and online and ask “Is anyone from Yonkers? I’m going there in June.” People love to recommend cool places and steer you away from lame ones; plus, these are people who know you so they’ll know what you like.

If you aren’t connected to someone who has lived in your destination, use Reddit. Almost every city has a subreddit, so post a respectful query on r/Yonkers about what to visit, where to stay, and what to avoid. Give some information about your interests and get ready to wade through a ton of often conflicting answers and arguments; that’s the way of the internet.

How to avoid tourist traps after you’ve arrived

If you’ve arrived at travel destination without a plan and you want to avoid tourist traps, do so by avoiding other tourists. If you find yourself somewhere with no sign of locals, it’s probably an inauthentic experience designed to separate rubes from their cash as quickly as possible. Gift shops are another marker—too many opportunities to buy trinkets should send you in the other direction.

In terms of restaurants, go where locals go. Avoid places with menus in multiple languages, hawkers trying to lure you inside, and gimmicky food—these are all signs of touristy places.

My idea of the very worst tourist trap on Earth is any cruise ship. I know some people enjoy these kind of experiences—there’s an open bar and you don’t have to worry about much of anything—but a cruise ship is the definition of a tourist trap: The only people there are tourists, and you’re literally trapped. On a boat. With other people.

The world’s worst tourist traps

Website Casago recently compiled a massive list of the world’s biggest tourist traps. They dug through Trip Advisor’s user reviews and determined the place mostly likely to be called a “tourist trap” by online reviewers. it. It’s a blunt instrument, but I can’t argue with the results: Fisherman’s Wharf in San Francisco is the world’s biggest tourist trap. The Dole Plantation in Hawaii, number three on the list, is pretty bad too.

But...when I looked a little deeper, it made me question whether avoiding all “tourists traps” is actually a good vacation goal in the first place.

Is St. Peter’s Basilica actually a tourist trap?

The descriptor of “tourist trap” is almost always seen as a negative, but maybe some people are using the phrase wrong. Sure, some places that attract tourists are faked-out experiences designed to empty wallets as quickly as possible (I’m looking at you, Cheeseburger in Paradise). But tourists also go to places because they’re cool, interesting, and unique. There’s a reason so many folks visit the Parthenon, and are you really going to travel to Paris and not go to the Eiffel Tower, supposedly the biggest tourist trap in France? Do you want to go to Rome and miss the Trevi Fountain because it’s surrounded by t-shirt shops?

When you’re traveling, you are a tourist, even if you don’t like what that means, so it’s often better to just embrace it—go ahead and wear that fanny pack; no one knows you here. Visit the absolute dumbest tourist spots you can find with the full knowledge that they’re lame. You’re on vacation!

People like to pay lip service to the idea having an “authentic” experience while traveling, but that’s usually not possible unless you’re staying for a while to get the vibe of a place, or you’re friends with some locals. And even if you do know some guys in Bali, most of the authentic people in tourist locations work at boring jobs in the tourism industry, marking the days until they can go on vacations of their own.


from Lifehacker https://ift.tt/emRb2rS

You Should Pour Boiling Water on Your Chicken Thighs

Even before the pandemic, I never attended many conferences, food-focused or otherwise. I do, however, enjoy them. The last one I went to was a sous-vide conference in 2019, and I met a lot of interesting people there, including Cole Wagoner, who at the time was working for Anova Culinary.

Cole is one of those people who is always making food that lives at the intersection of accessible and aspirational. His dishes are pretty and inviting and always perfectly plated. His chicken thighs, for example, are golden and juicy, with crispy skin that shatters with the slightest bit of pressure.

The secret to that crispy skin? Humble water. Boiling water, to be precise.

Seeing as chicken thighs are my favorite part of the chicken, I messaged Cole on Twitter to see if he could share his experience with this method, and explain why it works so well. (The following interview was lightly edited for clarity.)

Where did you hear about this technique?

I have a friend who is a food scientist and we’ve worked together on some recipes over the years, and this is one of the coolest things she taught me! It’s used a lot in Asian techniques as well, and that’s where she learned about it.

What happens when you pour hot water on chicken skin?

The skin starts to immediately shrink, pull back, and get much thinner and translucent due to the subcutaneous fat rendering under the skin and between the meat. This renders down everything that we work to render out during a perfect cook—like getting enough time skin-side down to brown while the fat renders. A lot of competition BBQ people will pull the skin off the thigh, invert it, and scrape the fat off. I find this achieves the same result much more expeditiously and with way less work.

How hot does the water need to be?

Boiling.

When do you season the chicken?

I always dry brine my chicken overnight with 1-2% kosher salt by weight, in the fridge, uncovered. This helps the flavor a ton and also dries out the skin a good bit, which, when paired with the boiling water trick, gets the skin super crispy. I usually dust the visible salt off before pouring the water over it. After [pouring] the boiling water, pat the skin/chicken dry and season.

Besides the addition of the water step, did you change anything else about how you cook your chicken thighs?

Nope! This method just helps the skin get very crispy and brown, but doesn’t really impact the cook otherwise. [It] works well in any [cooking] method: grilling, roasting, sous vide, etc.

What temp do you use to cook them and for how long?

I pan sear at about 400F, flipping as needed until internal temp is 165-175℉, but most of the time (about 80%), they’re skin side down. I’m also a big fan of doing this prior to a sous vide cook, as it really helps skin get crispy post-sous vide. It’s a must when I sous vide thighs, but a “nice to have” when cooking traditionally.


After talking to Cole, I bought a multipack of skin-on, bone-in chicken thighs to test the method out for myself. I salted four thighs, let them hang out on a wire rack in the fridge overnight, then poured boiling water over them until the skin became translucent. I then cooked them two ways—in the pan as Cole described, and in my air fryer at 400℉ for 20 minutes.

The underside of a piece of skin.
Photo: Claire Lower

Both came out great. The pan-cooked thighs, pictured at the top of this article, were my favorite. They took on a ton of color, got very crispy, and were nearly devoid of that jiggly subcutaneous fat that often hangs out under the skin of a chicken thigh, no matter how long you’ve roasted it.

Going forward, I will be pouring boiling water over every chicken thigh I cook. Even if you skip the overnight dry brine, this one quick step will render out that extra fat, resulting in some of the crispiest chicken skin you’ve ever experienced.


from Lifehacker https://ift.tt/mkJ8qWh

Wednesday, March 29, 2023

Versa Networks strengthens marketing team with three new executives

Versa Networks has named Dan Maier, a former executive from GreyNoise, Anomali and Zscaler, as its new Chief Marketing Officer.

In his role as CMO, Mr. Maier will lead Versa’s global marketing organization, including market strategy and positioning, branding, public relations, demand generation, digital marketing, product marketing, and channel and partner marketing.

Further adding to Versa’s growing marketing organization, the company has named Gopal Bhagia, former Senior Director of Global Demand Generation at Tenable, as its new VP of Demand Generation; and Kevin Sheu, former Bitglass Marketing leader, as its new VP of Product Marketing.

“I am excited to join Versa Networks at such an exciting and critical time for the company and the growth of SASE,” said Mr. Maier. “Versa is the clear market leader, with products architected from inception to natively integrate comprehensive security and networking functionalities. This is exactly what organizations need to simplify how they protect and connect their users, devices and sites. I look forward to helping the world understand what a great company Versa is, and also driving our growth and visibility during this pre-IPO expansion period for the company.”

Mr. Maier has more than two decades of experience in executive leadership roles at emerging growth companies in cybersecurity, SaaS and AI. He has led marketing teams at companies ranging from seed-stage startups to public companies, and he has deep cybersecurity marketing experience from GreyNoise, Anomali, Zingbox, Cyren, Zscaler, and Tumbleweed Communications.

Mr. Bhagia comes to Versa from Tenable Networks where he served as Senior Director for Global Demand Generation. Prior to Tenable, he had extensive experience in marketing automation/MarTech, product go-to-market strategies, and software development. Mr. Sheu previously held product marketing and marketing leadership roles at Bitglass, Vectra AI, Okta, FireEye, and Barracuda.

“We are thrilled to significantly expand our marketing team, and to have these three proven executives lead our marketing organization for the next phase of the company,” said Kelly Ahuja, CEO of Versa Networks. “Dan’s successful track record in cybersecurity, SaaS and AI will be of great benefit for Versa as we build our company for the future. With Dan, Gopal and Kevin we are well positioned to propel our continued lead in the rapidly expanding SASE space and execute on our growth trajectory.”


from Help Net Security https://ift.tt/TF63wUE

You Can Argue Against a Rent Increase

My lease renewal arrived it the mail a few weeks ago, bringing with it a small but significant rent increase. I’m hardly alone: Nationwide, average rents rose by a heart-clutching 14% last year, and financial forecasts have for months been warning of additional increases in the first half of 2023. It sucks to learn it’s going to cost you more every month to live in the same spot you’ve been inhabiting months or years, but it seems like an unavoidable part of being a renter.

But is it? You can’t always avoid a rent increase, but you may be able to find ways to reduce it. Here are some tips for negotiating down a rent increase before signing a new lease.

Remember, your landlord is a person

Sometimes, all you have to do is ask. I once had great success by simply emailing a landlord and saying I simply could not afford the increase. Even though you may rarely see your landlord, even if  your rent is auto-debited from your banking account every month, there is usually another human being on the other end of things, and sometimes, all it takes is an appeal to their better nature.

My anecdotal evidence might not convince you, but at Trulia, a real estate company, the experts say the same thing: You can negotiate directly with your landlord, at least to a point, but you have to know what to negotiate, and how to do about it. It’s expensive for a landlord to find a new tenant—probably more expensive than agreeing to lower your rent, unless the increase is truly egregious. They don’t necessarily care about you as a person, but they do care about not forcing you out, because that means they will suffer lost rent and other turnover costs, from painting or cleaning your unit, to listing it and paying a real estate broker to find a new tenant. Don’t threaten them, but do note in your initial email that you’re concerned the rent increase may impact your ability to stay in the unit, and that you’d like to open a negotiation.

Show evidence that you’re a good tenant

Just as you’d prepare for a one-on-one meeting with your boss by compiling evidence to show you’re a stellar employee, you should go through your bank statements and payment history to prove that you’ve consistently paid your rent on time. Provided you haven’t caused the landlord any major headaches—like damage to the unit that was your fault, or a string of noise complaints—you should also make the case for how easy you’ve been to deal with.

Present proof of your timely payments, plus any other evidence of what a model tenant you are, like proof that reported an issue in your apartment in a timely way so as to avoid further damage. Per Trulia, providing documentation of your overall trustworthiness not only reminds them how lucky they are to have you as a renter over an unknown—and potentially unreliable—future tenant, but demonstrates that you’re “committed” to the apartment.

Speaking of: One option is to offer to sign a longer lease on the condition the rent doesn’t go up. Landlords tend to love longer leases because they preclude the long, expensive hunt for a new tenant for a few more months. They want reliable income, and you want reliable housing. This is a good deal for you both, provided you are sure you’re willing to commit to the area for two or three more years. Trulia also suggests paying more up front if you can,—another way to show you’re a reliable income source—but if that’s not be a financially feasible option for you, syou have other tools in your arsenal.

Research comparable rents

Is the rent you are being asked to pay comparable to other units in the area? Hit up a rental site and look up all the units nearby. Compile a list of those most similar to your own in size, location, and amenities, then make a spreadsheet noting their asking prices. Present this information to your landlord only if your rent increase will put you significantly out of line with the average of the other units. This is a more likely to be taken as aggressive (since you’re basically accusing them of overcharging you), so only take this step if your increase will truly put you out of line with the average for your area.

Don’t forget to chat with your neighbors too. Money is a sensitive subject, especially if you and your neighbors aren’t chummy, but you’re all aligned in wanting to live in your building for a reasonable rate. Brick Underground, a New York-based company that helps real estate consumers make informed choices, suggests asking neighbors about their own lease renewal processes to get a sense of how the landlord negotiates and what exceptions and accommodations they’ve been willing to make in the past. If you know your neighbor has a similarly sized apartment, don’t be afraid to ask what they pay, if the vibe feels right (in my experience, the vibe always feels right for New York City renters, but your experience elsewhere may vary). They could even be paying more than you, which means you’d be helping  them negotiate in the future too.

Be nice

Most importantly, don’t be rude or aggressive with your landlord if you can avoid it. Try to negotiate in person, if it’s possible, and maintain a calm demeanor. If you act out, they might not see you as someone they want to keep in the unit. If you appeal to them in a direct but level-headed manner, you can have a real conversation. Go in with all your documentation at the ready, and know in advance whether you’ll be willing to make concessions like accepting a smaller increase or signing a longer-term lease.

Armed with proof that you’re a good tenant and comparable rents from the area, you’ll be able to make a good case—but make sure you begin your efforts well enough in advance of the end of your lease that you’ll have time for some back and forth...and to find a new apartment if you need to.


from Lifehacker https://ift.tt/QuWaTnm

Make Cinnamon Extract With Only Two Ingredients

It’s somewhat common knowledge that I boost my baked goods with almond extract instead of, or in tandem with, vanilla. But now I’ve added a third extract to the extravaganza: cinnamon. Beyond being an exciting addition to your flavor toolkit, you can make cinnamon extract at home on the cheap, and in two simple steps.

You need two ingredients: a small amount of vodka (or relatively flavorless alcohol), and a few cinnamon sticks. Both of these items should be fairly good quality. It’s hard to hide subpar ingredients in a recipe with so few ingredients, as there are no other components for them to hide behind. Luckily, extracts are concentrated, so you don’t need a lot of either ingredient to make a decent amount of cinnamon extract.

Day 0. Vodka and cinnamon sticks.
Photo: Allie Chanthorn Reinmann

In a small, but tall, glass container with a resealable lid, drop in two or three cinnamon sticks. Pour 5 ounces (about ⅔ cup) of vodka over the sticks. The liquid should cover the cinnamon sticks. I had a nearly empty glass jar of Simply Organic cinnamon sticks, so I just poured vodka over the remaining sticks until the jar was full. If you have a larger vessel, you can make a larger batch of this extract, but keep in mind that that is a ton of extract, so I hope you love it.

Day 14. Cinnamon extract.
Photo: Allie Chanthorn Reinmann

Step two is the hard part. You wait. It takes at least two weeks for the vodka to be infused with enough cinnamon compounds where it can flavor food effectively. Steeping the sticks for longer, about five weeks, led to a sufficiently strong extract. I noticed a much darker color, stronger smell, and higher potency when I added it to foods like oatmeal or shakes. Once you’ve reached the four or five-week mark, remove the sticks and discard them.

Day 35. Cinnamon extract.
Photo: Allie Chanthorn Reinmann

Although many high-end commercial extracts can produce fine, nuanced flavors, I’ve found this homemade infusion to be excellent for my purposes. Use a dash of cinnamon extract to flavor frostings, cookies and cakes, warm and spicy sauces, or French toast. It’s especially useful in liquids where you’d rather not have cinnamon powder clumping or settling into a muddy paste. Try it in cocktails, coffee, and custards. With vanilla, almond, and cinnamon by your side, you’ve got a solid lineup of warm aromatics.


from Lifehacker https://ift.tt/Zh43ijF

This Is How to Tell Whether a Recipe Really Is ‘Easy’

I’ve been fooled by the headline “Easiest (meal name) Ever.” It’s wasn’t pretty. The ingredients were purchased. The prep work was done. Sadly, the joke was on me–the recipe was, in fact, not easy at all. It’s an attractive word and hard to resist, and although the recipe may have been rote for the creator, “easy” means something different to everyone. Prevent yourself from becoming ensnared in the easy-recipe-trap and hit these checkpoints before you start.

How long does it take?

Many recipes will have a section at the top of the recipe that calculates roughly how long it took the author to do it. There may even be a few times: active time, inactive time, prep time, and cook, or bake, time. Prep time refers to setting up the components, like chopping ingredients or boiling water. Inactive time refers to wait time or when the ingredients are doing something without your help but not cooking yet, like fermenting dough. The cook time refers to how much time the dish is actively cooking. Add these together to see minimally how much time you’ll be devoting to this dish. Remember, that’s how long it took the author to do the recipe, and they already knew what they were getting into. A long preparation and cook time doesn’t necessarily mean the recipe will be difficult for you, but it alludes to commitment, attention, and possibly a long period of active participation.

Check the yield.

While you’re at the top of the recipe, check to see how much food it makes, or the yield. This will help you determine if the recipe fits your needs, ability, and available equipment. The “easy” sour cream cake recipe you found might produce enough batter for four layers, and you only have one cake pan. The dumpling recipe your friend recommended might make 48 two-inch dumplings, but you’re cooking for one person. Usually you can find the yield, or servings, right at the top of the page. It’s not always considered a standard part of recipe writing, so occasionally it’s hidden in the steps at the end, or nowhere at all. Sometimes large yield recipes can be cut in half, but you certainly want to be aware of that so you’re prepared to do the math.

When the yield is not listed, you can do some rough calculations to help you figure it out on your own. If the final product takes up volume, like soup, stew, a type of filling, or batter, add up the large ingredient measurements. A chili recipe that has eight cans of crushed tomatoes along with four cans of beans might be a bit much for a single person, but perfect for a family of four. Recipes that are baked in a measurable dish can also help you calculate the yield. Usually the pan, or baking dishes, are listed in the first step. A recipe that lists a 13 by 9-inch casserole dish is a big help. Take out the baking dish and you can estimate the slice size, or literally measure out slices, and get an accurate yield.

Read the ingredient list.

The ingredient list is one of the first places I look to see what a recipe demands. Here you can see how many ingredients you’ll have to procure, how many you might already have, and if you’re familiar with them all. Is everything a primary ingredient or are some prepared, like ground meat and spices versus a bag of frozen meatballs? Checking the ingredient list might reveal that all of the ingredients are easy to come by, or that you have to wait until the weekend to visit a specialty store.

What equipment will you need?

A list of necessary or specialized equipment isn’t always explicitly itemized, but if it is, you can find it at the top of the recipe near the cook time and the yield, or sometimes down the side margin. A recipe will likely come across as easier for you if you already possess the tools, and are familiar with how to operate them. A “pasta attachment” might not make any sense if you don’t have anything to attach it to, and a recipe that requires a deep fryer might have simple instructions for that machine but you have to fuss with a pot of oil and no thermometer. A recipe that requires an immersion circulator that you don’t have can change from “easy” to “easy if” in the blink of an eye.

Check the verbs, terms, and phrases.

The time commitment is manageable, you’ve scoped out the yield, the ingredient list checks-out, and you have all the equipment necessary to pull-off the recipe. It would be a damn shame to get stuck on step 3 because you didn’t know what “blanch” meant. Scan the recipe for the action verbs in each step. Most recipes lead with a short sentence that starts with the main verb–blanch the asparagus, julienne the carrots, reverse-sear the loin, or cut-in butter. Looking for cooking terms and phrases that may be unfamiliar, like “deglaze the pan” or “whip to stiff peaks” can help you decide if the recipe is actually easy for you, or if you have some research to do. Just because a recipe isn’t easy for you today doesn’t mean it can’t be a quick Tuesday dinner in the future. Like many activities, cooking and baking skills grow with practice. With these key checkpoints you can decide what’s easy for you.


from Lifehacker https://ift.tt/xZPpUNu

Don't Buy 'The Last of Us, Part 1' on PC

The Last of Us, and its subsequent remasters, are excellent games. Naughty Dog created a story and world so compelling, not only are we still talking about it a decade later, but a new audience is doing the same in the wake of the first season of the critically acclaimed HBO adaptation. While the game’s recent arrival on PC should be cause for celebration, it’s currently causing only controversy. The bottom line: You really shouldn’t buy The Last of Us, Part 1 on Steam, at least for the time being.

The game currently has a 33% approval rating on the digital gaming platform, which as a Last of Us fan, is kinda nuts. It’s totally opposite what I’d assume to see from a classic that has rarely suffered a bad review. For context, on Metacritic, different ports of The Last of Us—playable on the Playstation 3, PS4, and PS5—have scores ranging from 88% to 95%, and the PS5 version of The Last of Us Part 1 has 4.8 out of 5 stars on Amazon.

The issue isn’t that players are judging The Last of Us, Part 1 to be a bad game on its own merits. However, the game’s port to PC is under heavy fire for its poor performance and frequent crashes. One only need scroll through the most helpful Steam reviews to see comments like:

  • “Crashes every 20 minutes. Game is badly optimized. Game looks great just needs to be better optimized.”
  • “Wow this runs like crap.”
  • “I waited for almost 2.5 hours for the game to build shaders while crashing in the main menu every 5 or so mintutes [sic] - one of the most frustrating experiences I’ve had with a game.”

It seems the fault is not necessarily’s Naughty Dog. Rather, the blames lies with Iron Galax, the developers who ported the game to PC. This isn’t the first Sony port to face these types of issues, either—the PC versions of Horizon Zero Dawn and Uncharted were also rough to play compared to their PlayStation counterparts.

To be fair, not every review is scathing, or even highly critical. One reviewer even offered a recommendation to fix the problem: “For those people who are experiencing crashes with a Nvidia GPU, delete your current Nvidia driver and install the Nvidia 522.25 version driver. Most stable driver version of all time.”
We also see PC fans bragging about their platform of choice finally getting Sony exclusives: “Your Playstation console isn’t special anymore. Now give me Bloodborne.” If only it ran half as well as it does on PlayStation, maybe you’d have a point.

Of course, if The Last of Us, Part 1 did run well, it’d be an instant recommendation, even at $70. But in its current state, it simply isn’t worth your time. If you haven’t made the purchase yet, wait until Iron Galaxy has sorted its shit out. Naughty Dog is on the case, too, promising fans it is committed to fixing issues. If you already bought it and can’t return it, sit tight—hopefully, the problems will be fixed fast, so you can actually enjoy playing one of the best video games of the last decade.


from Lifehacker https://ift.tt/xwD25ai

The Best Apps You’ve Never Used to Sell Your Used Furniture

Selling furniture is a great way to clear out your space and make some extra cash (which, realistically, you’ll put toward new furniture), but it’s not really an intuitive process. While there are plenty of apps out there dedicated to managing the sale of whatever you want to sell, it’s hard to know which ones to pick. Snapping pics, writing descriptions, posting, engaging with possible buyers, and even paying fees to list your stuff is time-consuming, so you want to be sure you’re targeting just the right audience with just the right app—but how do you decide which app to use? Here are some of the best apps for selling your furniture.

If you’re in a hurry: OfferUp/Letgo

You may have heard of Letgo at some point, but not realized it was acquired by OfferUp in 2020. These two powerhouse buying-and-selling apps are now one big marketplace, and that marketplace is a great one for getting rid of your furniture. Since it’s the largest, you have the best chance of reaching a real buyer who genuinely wants your stuff—and you’ll only pay a fee if you end up having to ship your item. It’s a top destination if you’re in a hurry because not only are you reaching the most people, but you can list your items as free, too. If your goal is to clear your space, not necessarily make a buck, this is your app.

If you have something nice to sell: Chairish

Marketplaces and apps are full of people trying to make back some profit on old $35 Ikea chairs, which is fine. But all that reselling of the basics can really clog the space up, making it hard for your quality items—like antiques or designer tables—to stand out or appeal to people who are also simply looking for a deal. This is where Chairish comes in: The furniture sold on the app is curated by a team of people, which means you’ll have to apply for permission to have your stuff listed. Expect to get a commission of around 70% if you do get your furniture selected by the curators, but know this process and fee are worth it: The buyers on Chairish have an eye for quality and taste and might just be looking for exactly what you’re selling.

If it’s not imperative that you get your stuff out of your place immediately and you have a large amount of quality furniture to offload, try a bidding app like Everything But the House. Basically, it’s an estate sale—online. You can list furniture, art, memorabilia, or whatever is clogging up your space, then wait it out. If your listing is accepted, EBTH manages pretty much everything from photographing your items to writing descriptions. Every item starts at $1 and interested parties bid on it for up to a week. There are heavier fees here, however, so you won’t make exactly as much as the item goes for. The fees vary not only by location, but based on what your item sells for.

If you want to be hands-off: AptDeco

You might have time to snap some pics and write a few blurbs about how excellent your coffee table is, but having the time to coordinate a meetup or ship a big piece of furniture is another matter entirely. AptDeco is a marketplace that ensures you don’t have to do that part. You can post for free, but your listing won’t show up until the AptDeco team enhances your photos and adds more details. If someone puts in a request for your piece, you confirm the sale within 24 hours, and then the company sends a pickup and delivery team to you. Listing is free, but if your piece sells, you’ll pay between 25% and 48% in selling fees, depending on what was sold and how much it costs to move it around.

It’s worth mentioning that Kaiyo is a similar marketplace that provides a free pickup service, but also requires your items to be accepted, Chairish-style. If your pieces are accepted, they come get them right away, and you can even get paid right away, before anything even sells in their marketplace—or you can wait until it sells to get a percentage of its final selling price. This is a good option if you want your stuff gone right away, but might not be the best if you don’t have quality items that are likely to be accepted by the curators.


from Lifehacker https://ift.tt/ypb3SiN

What Is Zone 2 Cardio and How Do I Actually Do It?

Low intensity cardio—sometimes called LISS or “zone 2”—is an underrated form of exercise. It’s finally coming back into fashion after spending years on the sidelines while HIIT and lifting-only routines ran the field. But what is zone 2 cardio, exactly? Why should you do it? And how do you know if you’re doing it correctly?

What is zone 2 training?

“Zone 2” is a term drawn from the five-zone system of heart rate training, and the same concept is also known by other names and metrics. To runners it is “easy pace” or “long slow distance pace.” To cyclists, it corresponds to zones 2 and 3 of a seven-zone system of mechanical power. In other sports, like swimming and rowing, it’s often just called “easy” or “low intensity” exercise.

The hallmark of zone 2 training is that it’s relatively slow, and it’s done at a steady pace. If you’re aiming for a heart rate of 70%, that doesn’t mean doing intervals at 90% and then resting at 50%. It means holding that 70% level the whole time you’re exercising. You can do zone 2 cardio by running, cycling, swimming, rowing, brisk walking, rollerblading, or churning away on the elliptical.

To be clear, it’s still work—it’s not the same as sitting around resting—but it should feel like you could keep going forever if you wanted to. You don’t stop a zone 2 session when you get tired, you stop it because you set out for a 30 or 45 or 60 minute session, and your time is up.

What are the benefits of zone 2 cardio?

Zone 2 work builds your aerobic base. When you do cardio at this kind of easy pace, your body adapts by growing more capillaries (tiny blood vessels) to get oxygen and nutrients to your muscles more efficiently. You get more mitochondria to power each muscle cell—you have thousands of mitochondria per cell—and you produce more of the enzymes that turn food into usable energy. Your heart and your lungs get more efficient at taking in oxygen and moving blood to your muscles, and your muscles become able to store more carbohydrates (in a form called glycogen) so that more of the carbs you eat are at the ready when you start a run or ride.

For runners, easy pace should make up most (some say 80%) of your weekly mileage, and the fitness you build doing easy running is what allows you to benefit from, and recover from, harder efforts like interval training.

For people whose main sport is more strength oriented (meatheads like myself), zone 2 cardio strengthens the same body systems that help us recover between sets, and even between reps. It increases our work capacity, letting us get more work done in total. As long as you’re eating enough, adding cardio into your routine should make you able to do more work in the gym, not less. (And no, cardio does not kill your gains.)

And for people who are just exercising for health, zone 2 cardio is the perfect “moderate” exercise we’re all supposed to get at least 150 minutes of per week. It’s heart-healthy, and even people with medical conditions that limit their ability to exercise can often do low intensity cardio safely. (Ask your doctor to be sure, of course.)

Importantly, zone 2 training is very low fatigue. More time-efficient forms of cardio and conditioning like HIIT, hill sprints, or CrossFit WODs are great for your aerobic fitness, but those workouts have to be high intensity, and you’ll be pooped afterward. They’re great in small doses, but they kind of have to be in small doses.

By contrast, easy pace work is basically free. You can work up to doing an easy zone 2 session every day, in addition to your regular training, and feel fine. Once you’re used to it, you can do zone 2 work on your “rest” days without defeating the purpose of a rest day. As long as you have the time for it, it’s like a cheat code for aerobic gains.

How do you know when you’re in zone 2?

The best way to know if you’re in zone 2 is to pay attention to your effort, and how it feels. Even though “zone 2” is defined in terms of heart rate, I don’t recommend that beginners calculate it from heart rate percentages at first. Unless you’ve actually gotten your heart rate up to a maximum effort level, and know what that number is, you don’t really know your max heart rate.

Instead, let’s talk about what it should feel like. On a scale from 0 to 10, where 0 is nothing and 10 is all-out sprinting, low intensity cardio is about a 3. You’re working, but not very hard.

This pace is conversational, and it’s sometimes described with a “talk test.” If you could tell your friend about your day while you’re exercising, you’re probably around the right level. That doesn’t mean spitting out a few words here and there, but speaking in full sentences without feeling out of breath. If you find yourself stopping to catch your breath or if you feel like you need to take a break, you’re going too hard.

That said, it shouldn’t feel too easy—Zone 2 is more like a brisk walk or easy jog than a leisurely stroll. If you stop, you should feel like you took a break from something. It should take a little work and focus to keep up the pace.

Running

Runners often have trouble with this, because the dividing line between walking and running is sometimes too high to maintain an easy pace while you’re running, if you’re a beginner. The next best thing is to jog as slow as you can, and when you start to feel out of breath, switch to a brisk walk. For some people, a brisk walk for the whole session is a perfect zone 2 workout. As you get more fit, easy jogging will become possible.

Here’s a real world example of how to keep a zone 2 pace: if I’m heading out for an easy run, I start at a nice chill jogging pace. But I live in a hilly neighborhood, so pretty soon I’ll be chugging up a hill and notice my breathing getting heavier. At this point, I switch to a power walk. Jogging the flats and walking the uphills is a great way to keep your effort level steady, instead of accidentally turning your easy jog into a hill sprint workout.

Cycling

Cyclists often measure their training in a seven-zone system that is based on how much power, in a physics sense, you are putting into the gears of your bike. These are called Coggan power zones, and bike training systems like Zwift and Peloton use the same basic idea. To calibrate these zones, you’ll take an FTP (functional threshold power) test—basically, a 20-minute race against yourself. From there, you (or your training app) calculates wattage numbers for your zones.

Zones 2 and 3 in this system usually correspond to our “zone 2” cardio. (Your heart rate at the end of an FTP test will be pretty close to your max heart rate, by the way, if you really went all-out.) If you train with both a heart rate monitor and a bike power meter, don’t worry if they don’t match exactly. A ride in power zones 2 and 3 will meet your low-intensity cardio needs, even if your heart rate starts in zone 1 and spikes into zone 3 by the end.

Miscellaneous cardio

For other forms of cardio, go by feel, or by heart rate if you truly know your heart rate percentages. When you’re on the elliptical or the rower or the airbike, you should feel like you could carry on a conversation easily, and stop because time is up rather than because you’re running out of gas.


from Lifehacker https://ift.tt/WPDGmXQ

Tuesday, March 28, 2023

Signifyd and Adobe partner to eliminate the risk of payments fraud

Signifyd has achieved Platinum Partner status in the Adobe Technology Partner Program for Experience Cloud, making it fraud protection solution in the tier to offer complete and guaranteed chargeback protection to brands leveraging Adobe’s suite of commerce solutions.

Signifyd’s ascent to Platinum Partner status means it has never been easier for e-commerce merchants that rely on Adobe Commerce solutions globally to work with Signifyd to increase conversions while eliminating the risk of payments fraud, first-party fraud and policy abuse.

“We have long admired Adobe Commerce’s commitment to providing exceptional customer experience in the online world,” said Signifyd Chief Business Officer Indy Guha.

“As an Adobe Platinum Partner providing commerce protection, Signifyd can now amplify those customer experience efforts by providing unparalleled fraud and abuse protection along with proven conversion uplift,” Guha added.

The combination of Signifyd and Adobe provides online brands with a platform that delivers experience – from discovery and site experience to checkout, fulfillment and post-purchase support.

“We set out to build an online experience that matched the innovative heritage and premium feel of our versatile product lines while putting consumers’ needs at the center of it all,” said Sue Beckett, Lovesac SVP of digital marketing and ecommerce.

“Adobe Commerce provides the powerful platform and partnership ecosystem to do that. Add to that Signifyd’s precision commerce protection — which speeds up fulfillment and ensures that good orders are not turned away — and we are able to provide Lovesac customers with the experience they deserve and one that will keep them coming back,” Beckett continued.

The partnership is primed for a new era of ecommerce in which online merchants look to category leaders for the innovative solutions they need to thrive in a time when rising customer acquisition costs, higher fulfillment costs and inflationary pressures continue to squeeze digital commerce margins.

“Adobe is dedicated to assembling a partner ecosystem that is second to none,” said Justin Merickel, Adobe Experience Cloud VP of business development.

“Signifyd offers our customers the leading commerce protection platform and its laser focus on providing a peerless customer experience while maximizing brands’ revenue,” Merickel added.

Signifyd’s Commerce Protection Platform uses vast transaction intelligence from thousands of merchants globally to instantly sift fraudulent from legitimate orders — simultaneously protecting the enterprise from risk while increasing the number of legitimate orders that are fulfilled.

In fact, Signifyd’s technology increases order approvals by an average of 5% to 9%, according to a before-and-after analysis of a sampling of merchants that have deployed the Commerce Protection Platform.


from Help Net Security https://ift.tt/iVbr5Fc

Cops use fake DDoS services to take aim at wannabe cybercriminals

Thinking of trying a bit of DDoSsing to get a feel for life at the fringes of the Dark Side? Don't do it!
from Naked Security https://ift.tt/ZgnJ6fM

Exchange Online will soon start blocking emails from old, vulnerable on-prem servers

Slowly but surely, Microsoft aims to make it impossible for unsupported and/or unpatched on-prem Microsoft Exchange servers to use the company’s Exchange Online hosted cloud service to deliver email.

Blocking potentially malicious emails from reaching Exchange Online

“To address [the problem of persistently vulnerable Exchange servers that cannot be trusted], we are enabling a transport-based enforcement system in Exchange Online that has three primary functions: reporting, throttling, and blocking,” the Exchange Team noted.

“The system is designed to alert an admin about unsupported or unpatched Exchange servers in their on-premises environment that need remediation (upgrading or patching). The system also has throttling and blocking capabilities, so if a server is not remediated, mail flow from that server will be throttled (delayed) and eventually blocked.”

In the first stage of this planned enforcement, Microsoft will just make it obvious to Exchange Server admins that a particular server is unsupported or out-of-date: by showing alerts in a new mail flow report in the admin center in Exchange Online, and via a post in the Message Center that all Exchange Server customers will see.

If that doesn’t incentivize them to patch or upgrade in the next 30 days, the company will roll onto the next stage: delaying (throttling) the server’s delivery of emails to the Exchange Online service for 5 minutes.

The next 6 stages involve increasing periods of just throttling or throttling AND blocking. Finally, if the admin of that server hasn’t moved to patch or upgrade the server in 90 days, Exchange Online will no longer accept any messages from the server.

Exchange Online blocking emails

The stages of progressive enforcement system (Source: Microsoft)

“Persistently vulnerable” servers and the emails sent from them can’t be trusted, Microsoft says, and are a danger to all Exchange Online cloud instances, as well as email recipients.

“The enforcement system will eventually apply to all versions of Exchange Server and all email coming into Exchange Online, but we are starting with a very small subset of outdated servers: Exchange 2007 servers that connect to Exchange Online over an inbound connector type of OnPremises,” the Exchange Team added.

“Following this initial deployment, we will incrementally bring other Exchange Server versions into the scope of the enforcement system. Eventually, we will expand our scope to include all versions of Exchange Server, regardless of how they send mail to Exchange Online.”

If a server version is still supported (e.g. Exchange 2016 and 2019) but the server is “significantly behind” on security updates, it will be considered vulnerable and mail flow from it will be delayed and/or blocked.

“If the server is patched after it is permanently blocked, then Exchange Online will again accept messages from the server, as long as the server remains in compliance. If a server cannot be patched, it must be permanently removed from service,” Microsoft pointed out.

Why?

Microsoft’s stated goal is to protect its internal infrastructure and to raise the security profile of the Exchange ecosystem, especially because there has been a significant increase in the frequency of attacks against Exchange servers in the last few years.

Lively discussions in the announcement‘s comments section and on Reddit revealed that some people welcome Microsoft’s move and others see it as the beginning of a maneuver that will force customers to stop using Exchange on-prem completely and switch to using Exchange Online (and pay for that, of course).

Scott Schnoll – Microsoft’s Product Manager for Exchange Online and Exchange Server – said that Microsoft won’t be stopping support for newer versions of Exchange servers. Also, that customers are not required to replace unsupported versions of Exchange with a newer one.

“There is no requirement to use a Microsoft product to send mail to Exchange Online. We want customers to be secure no matter where they choose to run their email,” he noted.

Can we assume that means that, eventually, email traffic from other non-Microsoft products that are deemed “persistently vulnerable” will be blocked as well? The company did not explicitly say.

“We are initially focusing on email servers we can readily identify as being persistently vulnerable, but we will block all potentially malicious mail flow that we can,” the Exchange Team stated.

When?

Schnoll says that after a short private preview, the first wave of affected customers will see the new mail flow report and alerts on May 23.

“June is when throttling begins for the first wave, and July is when blocking begins. On the day blocking begins for the current set of customers, the next set of customers will receive notification,” he added.


from Help Net Security https://ift.tt/IsJmk3A