The Latest

Microsoft still doesn’t known how Storm-0558 attackers managed to steal the Microsoft Services Account cryptographic key they used to forge authentication tokens needed to access email accounts belonging to US government officials.

“The stolen 2016 MSA key in combination with [a] flaw in the token validation system permitted the threat actor to gain full access to essentially any Exchange Online account,” CISA’s Cyber Safety Review Board (CSRB) noted in a recently released Review of the Summer 2023 Microsoft Exchange Online Intrusion.

“Microsoft does not know when Storm-0558 discovered that consumer signing keys (including the one it had stolen) could forge tokens that worked on both OWA consumer and enterprise Exchange Online. Microsoft speculates that the threat actor could have discovered this capability through trial and error.”

Known unknowns

In May and June 2023, Storm-0558 – a hacking group associated with the Chinese government – compromised Microsoft’s cloud environment and accessed cloud-based mailboxes of US State Department officials, Commerce Department’s officials, as well as users at other government and private sector organizations in the US, the UK, and elsewhere.

The intrusions were noticed on June 15, 2023, by the State Department’s security operation center analysts, who spotted anomalous mail access behavior. After Microsoft provided access to additional audit logs, they found that the intrusion into the various mailboxes started on May 15 and possibly even earlier (it’s impossible to say because the logs covered just the last 30 days).

Microsoft Storm-0558 key

The timeline of the Microsoft Exchange Online intrusion. (Source: CSRB)

In September 2023, Microsoft posited that Storm-0558 got the MSA 2016 key from a snapshot of a crash of a consumer signing system. This “crash dump” got moved to a “debugging environment on the internet connected corporate network”, from where it was exfiltrated by the attackers who managed to compromise a Microsoft engineer’s corporate account.

“Due to log retention policies, we don’t have logs with specific evidence of this exfiltration by this actor, but this was the most probable mechanism by which the actor acquired the key,” the company said at the time.

According to information shared with the CSRB, the company “soon after” found no evidence of a crash dump containing the 2016 MSA key material, but for waited until March 2024 to amend the original blog post to include that piece of information.

“Our leading hypothesis remains that operational errors resulted in key material leaving the secure token signing environment that was subsequently accessed in a debugging environment via a compromised engineering account,” the company added.

Microsoft also currently believes that a incident from late 2021, when Storm-0558 obtained access to a Microsoft engineer’s account via a compromised device, might be linked to the 2023 Exchange Online intrusion, through the company has not produced evidence to back that belief, the CSRB noted.

“A preventable intrusion”

Though they praised Microsoft for fully cooperating in the review, the CSRB excoriated Microsoft by saying that the intrusion was the result of a “cascade” of avoidable errors, including:

  • The company’s failure to detect the compromise of its cryptographic keys
  • The lack of adequate cloud security controls
  • Their failure to detect a compromise of an employee’s laptop from a recently acquired company before allowing it to connect to the company’s corporate network

“The Board finds that this intrusion was preventable and should never have occurred. The Board also concludes that Microsoft’s security culture was inadequate and requires an overhaul,” the CSRB stated, and advised Microsoft to make its CEO and Board of Directors focus on the company’s security culture and security-focused reforms across the company and products.

“The Board recommends that Microsoft’s CEO hold senior officers accountable for delivery against this plan. In the meantime, Microsoft leadership should consider directing internal Microsoft teams to deprioritize feature developments across the company’s cloud infrastructure and product suite until substantial security improvements have been made in order to preclude competition for resources.”

The review also provides security advice for all cloud service providers, who “have become custodians of nearly unimaginable amounts of data.” The extensive recommendations are aimed at improving their cybersecurity practices, upping their minimum standard for default audit logging, implementing emerging digital identity standards, and more.


from Help Net Security https://ift.tt/A8rKQ7o

An idea pops into your head while you're working on something else. How do you get it down and get back to work?

You could open a document and save the idea there, or quickly open your note-taking app of choice, but both of those things are going to take you out of whatever you're working on now. Apple somewhat solved this with the Quick Notes feature in macOS, which allows you to move your mouse to the bottom-right corner to quickly make a note. The problem: This depends on Apple Notes, which you might not use. Another problem: You have to move your mouse, which can take you out of whatever you're working on.

Type does quick note-taking better than Quick Notes. This $4 Mac app combines the speed of a launcher like Spotlight or one of its replacements with note-taking. Basically: You use a keyboard shortcut to open the application, which pops up over what you're working on the way an app launcher does. Type what's on your mind, then hit enter, and the app will close, allowing you to get back to the task at hand.

You can review all of your notes using the app, if you want, but the really nice part is that everything is date-stamped and stored in a text document on your computer. This means you can see and manage your notes using your text editor of choice.

The notes you take are stored in a simple text document
Credit: Justin Pot

This is particularly useful if you, like me, are a dedicated Obsidian user. Simply store your Type note as a Markdown file in your Obsidian vault and you can quickly add random links to a file you can reference later in Obsidian. You can do the same thing with any note-taking app that uses text files.

Type can optionally store your notes in multiple files, which you can store wherever you like. When you're typing a new note, simply use the up and down arrow keys to make sure your notes are going to the right place.

Two different files are shown in the Type launcher
Credit: Justin Pot

There's not much in the way of settings. You can configure the keyboard shortcut; you can choose which application to open note files in—the default is TextEdit. You can also change the formatting of the time stamp added to each note you add, or remove the time stamp entirely, and decide whether new notes should be added to the top or end of your files. It's not a complex app but it does one job well. I think I'm going to be using it every day.


from LifeHacker https://ift.tt/JWexBRb

The big pop culture news this week for young people is the release of Beyoncé’s newest album, which is also the biggest news in pop culture for older generations. Cowboy Carter is a rare piece of pop culture that is on everyone’s radar, so I thought I’d try to figure out why this one singer can pull off what no one else is able to. There’s also a new, gross word to learn, and we can all marvel at the ingenuity of young people when they try to skirt online rules against sexy content. 

What Beyoncé means to Generation Z

Late last week, Beyoncé released her eight studio album, a country-inspired collection called Cowboy Carter. The singer/songwriter/icon is 42 years old, a late Millennial, but she’s not dismissed by young people. If you judge by online response to Cowboy Carter, The Queen transcends generational divides as thoroughly as she transcended musical divides by taking over country music. There’s a TikTok dance trend, with vids like these gaining millions of views, and Gen Z is even getting into country music, with diehard, not-country young people agreeing with critics that the single “Texas Hold ‘em” is a banger and the album is killer. It's not just the first single; the internet has become obsessed with her new take on Dolly Parton’s “Jolene," too. For cultural comparison, Beyoncé is like mid-career Madonna, but more so. She’s an icon who's still relevant, and if there’s any importance at all to popular culture, the release of Cowboy Carter feels like a page being turned: Other than the usual grousing dipshits, everyone of every age, race, and creed, is into Beyoncé’s new album. I even like it, and I hate everything.  

Butt-based greenscreen and Twitch’s cat-and-mouse culture war

Morgpie livestream
Credit: Morgpie/Twitch

Streaming service Twitch, known mostly for streaming gaming content, has been engaged in a cat-and-mouse war with some of its users for years. At issue: Twitch’s policy toward risqué content on streams. The latest salvo in the battle: Twitch has banned users from streaming content on their butts.

About two weeks ago, innovative Twitch streamer/cosplayer Morgpie skirted Twitch’s content policy against nudity by using a greenscreen to display gameplay footage on her hinder. This weekend, Twitch responded by announcing: “Starting on Friday March 29th, content that focuses on intimate body parts for a prolonged period of time will not be allowed.” 

This isn’t the first time that Morgpie inspired Twitch to change its content policy. Back in 2023, she started appearing in streams topless, but framed so that users couldn’t quite see the  forbidden parts of her breasts. Morgpie was temporarily banned, and Twitch updated its policy on sexual content. 

This led to streamers using censor bars, something called "Show hole meta." Even earlier than that, back in 2021, Twitch cracked down on Hot Tub streams, while acknowledging how difficult it is to decide whether sexy content is too sexy.

What is “jelqing”?

Like “Looksmaxxing,” “bone smashing,” and “mewing,” jelqing comes from the moldy and disturbing world of incel culture. Put simply, it’s penis-stretching. Jelqers either pull their junk manually or use devices to do the stretching—this isn’t a medically approved procedure, so there’s no set of best practices. The idea is that the trauma creates micro-tears in the skin and the penis grows back bigger. As for whether it works or not, the smart money is on “fuck no.” There are anecdotal reports online of jelqers who say it works, but sometimes people lie online. I can’t find any reliable data on the effectiveness of the procedure, and urologists point out that it can lead to the formation of scar tissue, pain, erectile disfunction and and Peyronie's Disease.

Gay furries hack church, purchase inflatable sea lions

SiegedSec, a group of self-proclaimed gay furries, claim that they breached the security of the River Valley Church in Burnsville, Minnesota. On a recent Telegram post, SiegedSec accused a church pastor of making anti-trans statements, posted links to church members’ emailed prayer requests, and used the church’s funds to send them 100 inflatable sea lions.

“We hacked their accounts and spent thousands of dollars on inflatable sea lions (we couldn’t donate it), and we have leaked 15k+ user data :3,” the hackers posted. 

River Valley’s head god-botherer, Rob Ketterling, is active on Twitter, spreading the weird idea that Joe Biden declared Easter Sunday a transgender holiday. I hope he enjoys his inflatable sea lions.

Viral video of the week: Duck Song 4

This week’s viral video is the fourth installment of the Duck Song, an animated video for kids that was viewed nearly two million times in its first week of release. The Duck Song is a generational dividing line. If you're under a certain age, you've seen it. If you're over that age (and childless) you haven't.

YouTuber forrestfire101 released the first Duck Song video 15 years ago, and it’s been viewed 625 million times since. It’s impossible to explain exactly why. It’s amusing enough as a story/joke, the song is catchy enough, and the crude animation is cute, but that can be said for uncountable millions of videos aimed at children that are posted on YouTube. For some reason, The Duck Song captured the imagination of children and YouTube’s algorithm to the point of being a universally recognizable thing for a generation.

Duck Song’s creator wisely opted to limit the release of new installments instead of flooding the zone with Duck crap when it was first released, thus avoiding turning it into a flash in the pan. They also didn’t try to expand, change, broaden, or otherwise tamper with the original video’s simplicity. So the Duck Song videos became a universally recognized thing to at least two generations—fans of the original Duck Song have children of their own now, and are no doubt sharing it with them before they waddle away.  


from LifeHacker https://ift.tt/CAyN04Z

This post is part of Find Your Fit Tech, Lifehacker's fitness wearables buying guide. I'm asking the tough questions about whether wearables can really improve your health, how to find the right one for you, and how to make the most of the data wearables can offer.

Usually you buy a fitness tracker and install health-related apps because you want to be healthier, so it seems natural to chase whatever metrics the apps give you. But those metrics are there because they’re easy for an algorithm to measure and judge—not because you’ll be healthier if you try to max out every score, every day.

Here are a 10 ways your fitness apps can steer you wrong, and what to do instead.

Rushing your warmups

Every app or gadget that can track runs is able to tell you the distance you ran and for how long. From those two numbers, the little chips in your phone can’t help but calculate your pace. “I’m running 12-minute miles?!” you might say as you check your watch. “Well, next time I’ll have to run faster.”

Many running workouts should really start with a slower warmup, one that has you jogging slowly or working your way up from a brisk walk. The real workout starts when the warmup ends. But if you’re logging the whole thing, that leisurely warmup brings down your overall pace. And you’ll also have a hard time running appropriately slowly on your easy runs if you see that total time as a personal judgment.

What to do instead: Either mark your warmup (and any active rest between intervals) as a separate lap or segment, or ignore your total pace.

Sleeping in too late

Sleep trackers can help you figure out whether you’re getting enough sleep, and how you can get more. But they’re so focused on grading each night of sleep that you'll often find yourself asking, “How can I get a better sleep score tonight?” rather than, “How can I get better sleep, in general?”

Let’s say you’d ideally like to wake up at 6 a.m. If you’ve stayed up until midnight, the best way to maximize your sleep score is to skip your morning workout and see if you can sleep in until 8 a.m. But if your goal is to sleep better in general, it would make more sense to leave your alarm set for 6 a.m. no matter how late you stay up. Tomorrow, you’ll be even more tired in the evening, so you'll go to bed earlier, and pretty soon you’ll get back on track.

What to do instead: Focus on building the habits that make for good sleep (like a dark bedroom and a consistent routine) rather than seeing each night as a separate test to pass.

Skipping workouts when your scores are low

The apps and gadgets that give you a “readiness” or “recovery” score often say they do this so you can make informed choices about how hard you’d like to go in your workouts. But any good coach will tell you you’ll have a tough time making progress if you’re afraid of fatigue. When you follow a well-designed program, you will have days, sometimes entire weeks, when you’re training hard and feeling a little beat up.

Sleep trackers can help to make sure you’re recovering as well as you can given your training stresses, but if you were to take a rest day every time you got a low recovery score, you’d miss out on a lot of good training. Your body is resilient enough to put up with the stress of training, I promise.

What to do instead: Get a good program (or trainer or coach) and trust the process. Compare your scores to what you would expect given your training. Low score after a tough week? That’s normal. High score after a tough week? Maybe your program isn’t challenging you enough. Low score after an easy week? Now you might start questioning whether you’ve been training too hard.

Avoiding workouts that don’t give you “steps”

Gadgets that track steps (which now includes every phone) are great for encouraging you to get more activity during the day. Every shopping trip or dog walk gets you a few steps closer to your goal—although, remember, 10,000 steps is an arbitrary number and you can set your goal to something else.

The danger is that you’ll start to think of workouts and activities in terms of what will give you the most steps. Trying to decide between a spin class or a hike? A jog or a strength training session? It’s easy to get into a mindset where steps are the tiebreaker.

What to do instead: Consider what your body needs and wants, not just how high you can push that step count.

Missing out on the best parts of strength training

Strength training is good for you, in so many ways. It helps you avoid minor injuries, to have an easier time with everyday tasks, to have a good quality of life as we get older, and to keep a healthy body composition as you gain or lose weight. Its job is not to keep your heart rate up for a certain number of minutes. (You’re thinking of cardio.)

But if you use a gadget to track your strength training, it’s tempting to try to keep your heart rate up the same way you would during a cardio workout. This means you’ll take shorter rest breaks between exercises, which in turn means you won’t be able to lift as heavy. Ultimately, you’ll be missing out on a lot of the benefits of strength training because you were chasing the wrong goal.

What to do instead: Either don’t track your strength training sessions with a gadget that measures heart rate, or use the data only to note that you did the workout, and how long it took. Take some rests between your exercises and find out how strong you really are!

Assuming your watch knows how many calories you’ve burned

One of the selling points of fitness trackers is the idea that they know how many calories you’re really burning when you do an exercise, or even when you go about your day. Unfortunately, calorie burn isn’t that predictable, and your watch is just making a wild-ass guess.

What to do instead: If you’re trying to figure out how much to eat, track how much you eat and see if the scale goes up or down. Adjust accordingly. If your watch thinks you’re burning 2,500 calories a day, but your weight stays constant on 2,300, then you’re burning 2,300.

Worrying about your sleep quality

Sleep trackers are pretty good at telling you how much time you spend in bed, but they’re terrible at judging when one sleep stage ends and the next one begins. I’ll never forget the first week I wore both an Oura ring and a Whoop band, and the Oura told me I didn’t get enough REM sleep and the Whoop told me I was getting too much.

What to do instead: Take the scores from your sleep app with a grain of salt. Reading too much into your sleep quality can create a "nocebo" effect, where you feel tired because you expect to feel tired. Pay attention to the total amount and consistency of your sleep instead.

Setting yourself up for failure with a streak

Longtime Lifehacker readers know this is a pet peeve of mine: The app that thinks it’s nudging you into healthy habits, only to reward you with a streak that you will inevitably break and feel terrible about.

Streaks end. Every streak ends. Do you really want to be one of those people who sets reminders to track a meditation “workout” every day on vacation so you won’t lose a streak? It’s just not worth it. Or if it is, admit to yourself that you’re playing a game with your app—this isn’t a health-promoting habit.

What to do instead: Honestly? Break the streak. Do a workout without tracking it, on purpose, to free yourself. Take a weekly rest day. You probably need it anyway.

Worrying too much about your calories

Strict diets can be a gateway into disordered eating for some people, and tracking calories can sometimes have that effect as well. If you’re able to track your calories and stay mentally healthy, that’s great. But that doesn’t mean you have to obsess over your calories.

For example, you may start to feel a sticker shock about any large meal. There’s nothing wrong with eating an 800-calorie lunch if it’s made of foods that fit into your diet in a healthy way (plenty of protein and vegetables, for example). But if you’re afraid of logging a too-big number, you might decide to only eat half that meal, and then find yourself hungry and digging into the snack cabinet later. Or to take another example, you might avoid logging certain snacks or condiments for fear of adding to the Big Number, but if you were to log more honestly, you would see that your body is actually able to handle more calories than you thought it could.

What to do instead: Accept that eating food is part of how you fuel yourself. If you’re sure you want to track calories, use an app like Cronometer that is less visually judgmental about them.

Chasing a “good” number on pretty much anything

What’s a good HRV reading? What’s a good resting heart rate? What’s a good VO2max? What’s a good running pace?

I won’t call these “meaningless” numbers, because they do have some utility. But they’re not scores on which you should judge yourself as a person in the universe. Each number means something in context, and doesn’t mean much outside of that context.

For example, if you currently run a 10-minute-per-mile pace, it doesn’t matter whether that’s “good.” You can train to run faster, should you choose. Or take HRV, which stands for heart rate variability—that’s a number that can be useful to tell you whether you’ve been under a lot of stress from training or life; it’s not the kind of thing you can meaningfully compare to others.

What to do instead: Ask yourself what really matters. A number on your screen doesn’t mean anything in real life, but maybe you’re improving something about your heart health or your ability to run races. Focus on those ultimate outcomes, not on your daily score.


from LifeHacker https://ift.tt/hRqXDCN

This post is part of Find Your Fit Tech, Lifehacker's fitness wearables buying guide. I'm asking the tough questions about whether wearables can really improve your health, how to find the right one for you, and how to make the most of the data wearables can offer.

A watch can be a great friend when you’re out adventuring—helping you navigate, communicate, and keep track of your activity, no matter what you end up doing. "Outdoors watches" have a tougher job to do than a running watch or a general-purpose fitness tracker, and I have a few picks for the best ones. 

To be clear, you don’t need a watch just to hike and camp and kayak. But many outdoor adventurers enjoy having one as an on-wrist companion...so here’s a guide to finding the right one for you. 

What to look for in an outdoors watch

Does it come with maps? 

Some GPS watches come with fully-featured maps, preloaded onto the watch. Others have GPS functionality, minus the maps. With these, you can get a track of where you’ve been (“breadcrumbs”) and you can mark specific spots you’d like to come back to (“waypoints”). Pay attention to whether a watch comes with its own maps, can accept maps that you upload yourself, or can only do breadcrumbs and waypoints. 

How good is the GPS? 

GPS isn’t the only game in town anymore. There’s also GLONASS, Galileo, Beidou, and QZSS. But you don’t need to choose: the best accuracy will come from watches that can use several different systems. GPS itself will usually be in the mix, but note that single-band GPS isn’t as accurate as dual-band. In general, the more services a watch can use, the more accurate it will be.

What is the battery life? 

Smartwatches need to last all day; running watches need to get you through a run. But for an outdoors watch to really shine in the battery department, it should be able to tackle days-long hikes. Some of my picks will last for weeks on their lower battery settings, and be able to track an all-day activity with GPS running the whole time. I'm also awarding extra points here to watches that can do solar charging. 

Make sure to check the settings on your watch; there may be several battery-saving settings to allow you to fine-tune the tradeoffs you’re making. 

Our picks for the best outdoor and adventure watches

Best overall: Coros Apex 2 Pro ($449)

The Coros Apex 2 Pro has five-system GNSS with multi-band GPS for accurate location tracking. The Pro comes with global maps pre-loaded. 

This watch has a multitude of sport modes, including different types of swimming, biking, and skiing, water sports like windsurfing, and not just rock climbing but also multi-pitch climbing. There are also triathlon and multi-sport modes for when you need to combine multiple activities into one workout.

The Apex 2 Pro gets 24 days of use in smartwatch mode, and 66 hours with full GPS. It’s also got a sapphire screen and can give you training plans if you like.

  • Coros Apex 2 Pro ($449)

  • The Coros Apex 2 (not pro) is $349. The GPS isn’t multi-band and it doesn’t come with maps, but you can upload the ones you need. 

  • The Coros Vertix 2 is an upgrade from the Apex, retailing for $699 and featuring a longer battery life, and a bigger, higher-resolution screen.

Best for battery life: Garmin Instinct Solar ($259.99)

This rugged watch has multi-system GNSS (GPS, GLONASS, and Galileo) plus its own built-in compass and altimeter. Garmin also brags that it’s built to military standard 810 for heat, shock, and water resistance. 

The Instinct Solar doesn’t come with full-featured maps, but you can navigate with breadcrumbs (seeing a line showing where you’ve been) and waypoints (marking a spot so you can navigate to it later).

The Instinct Solar has a long battery life, allowing for 24 days (not hours, days!) in smartwatch mode, or 30 hours while recording GPS and heart rate. At the other end of its spectrum, the watch can go a whopping 56 days in battery-saving mode. If the watch gets at least three hours of bright (50,000 lux) sunlight per day, you could theoretically get unlimited battery life.

  • My pick: Garmin Instinct Solar ($259.99)

  • For a budget option, the non-solar Instinct is currently just $169.99.

  • Want the best and newest? The Garmin Instinct 2 Solar is $399.99, but the upgrades are pretty minimal when compared to the original version. For example, you’ll  get a slightly better battery life, and the ConnectIQ feature that lets you customize the watch faces. 

The fancy-pants model: Garmin Fenix 7 Pro Solar Sapphire ($899.99)

This was our pick for a top-of-the-line running watch, and it takes the same spot here as well. The Fenix 7 series has a long battery life, solar charging (in models with Solar in the name), a rugged build with scratch-resistant glass, and a flashlight to be handy around a campsite. 

Besides the obvious running and hiking activities, the Fenix 7 has modes for plenty more, including skiing, rock climbing, and even skydiving. There are also modes for hunting and fishing, with features to navigate to your favorite hunting spots or to note when and where you caught a fish. 

There’s also an expedition mode, which notes your location once an hour—perfect for multi-day hikes, where you might want to know how far you went that day but you don’t want to run down your battery tracking all the time.

  • My pick: Garmin Fenix 7 Pro Solar Sapphire ($899.99)

  • Want to save a few bucks? Here’s a Fenix 7S Solar (not Pro, not Sapphire) for $579.99. Battery life is 11 to 14 days depending on how much sun it gets. 

  • If you can do without the flashlight, solar panels, or touchscreen, you can save even more with this refurbished Fenix 6 Pro for $329.99. 

Best off the beaten path: Suunto 9 Baro ($239)

While Garmin and Coros are the best-known brands in this area, Finnish brand Suunto has its dedicated followers. I’ve read countless forum threads where people enthuse about how well-built the watches are and how they’re a better deal for the money than Garmins with similar specs. 

The Suunto 9 Baro gets its name from the built-in barometer, which measures air pressure and can warn you when a storm is coming. This watch has 80 different sport modes. The battery lasts up to 7 days in smartwatch mode, or can handle 24 hours of activity tracking with GPS. 

  • My pick: Suunto 9 Baro ($239)

  • If you want to stick with Suunto but need more battery life, check out the Suunto Vertical ($629) which has 60 days’ worth of battery in watch mode. It also has free global maps.

  • The Suunto 9 Peak Pro ($409) has a 21-day battery life, and is slightly smaller and lighter than the 9 Baro.


from LifeHacker https://ift.tt/6oTIUhm

This post is part of Find Your Fit Tech, Lifehacker's fitness wearables buying guide. I'm asking the tough questions about whether wearables can really improve your health, how to find the right one for you, and how to make the most of the data wearables can offer.

Sometimes you want a wearable that is a smartwatch first, and and activity tracker second. Something like an Apple Watch or a Samsung Galaxy Watch has plenty of features to keep tabs on your steps and sleep, but they don’t stop there. They can also take notifications and calls, unlock other devices, play music, and pay for things. If that’s what you want, you’ll probably be happiest if you pick a smartwatch you like, and then explore its fitness features. (Spoiler: It doesn’t even have to be one on this page.) 

On the other hand, maybe you want a fitness tracker that isn’t a fancy smartwatch. This is where brands like Fitbit and Amazfit come in: They give you the basic features you actually want, and only add as many smartwatchy features as you ask for. These tend to be a lot cheaper than full-featured smartwatches. 

So let’s dive into the wide world of fitness watches, and find the best one for you. 

My Picks

Best overall: Fitbit Charge 6 ($159.90)

Fitbit has owned this market sector for a long time, and if you think of a Fitbit when you think of fitness trackers, look no further—this is probably the one you want.

The Charge 6 is the newest Fitbit, and it hits a lot of sweet spots. It’s bigger than the Fitbit Inspire, but smaller than the Fitbit Versa (and the other smartwatchy options). It isn’t as customizable or feature-rich as the Versa and kin, but it still has Google Maps, Google Pay, and music controls. 

If you use an Android phone, the Google apps will feel familiar. And if you have friends who use Fitbits, you’ll be able to connect with them on that platform. If these sound like ecosystems you’d be happy to be a part of, then we predict that you’ll be happy with a Charge 6

Best for iPhone users: Apple Watch Series 9

It used to seem like overkill to recommend an Apple Watch to somebody who just wants to track a few fitness metrics, but fancy fitness watches have exploded in price (and features!), making Apple Watches look like a mid-range option. 

There are, of course, many different Apple Watches. For fitness tracking, I’d recommend the Series 9, which is retails for $329.99 in the version that has GPS but no cellular connection. Upgrade to the cell version and the 45 mm screen, and you’re looking at $459. The Ultra 2 ($737.99) is probably overkill if you just want a basic fitness tracker, but it does have dual-band GPS, bringing its location accuracy on par with some Garmins. 

All of the Apple Watches track a wide variety of health metrics, including sleep, steps, and heart rate. (They may not have blood oxygen tracking going forward, but you didn’t need that anyway.) There are tons of apps you can use alongside or instead of the native ones, including WorkOutDoors for tracking running and cycling, and Athlytic, a subscription app that tracks athletic recovery. 

Apple Watches, like iPhones, tend to stay functional for many generations after they’ve been replaced, so don’t discount older models. Right now, Amazon reports that its best-selling Apple Watches include a second-generation SE from 2022 for $189 and a Series 4, launched in 2018, for just $149.

Best budget pick: Amazfit Band 7 ($44)

If this is all sounding too complicated, and you’re maybe a little miffed at seeing so many three-digit numbers when it used to only take a $20 pedometer to count your steps, let me introduce you to a solid budget pick: the Amazfit band, now in its 7th generation. 

It tracks your heart rate and steps, can detect when you’re napping, and the watch faces are customizable. It’s waterproof, so you can take it in the pool, and it has over 100 activities it can track (four of which are automatically detected). You can even talk to it (with Alexa) and ask it to set reminders for you. Is it going to be the best at any of those jobs? Probably not. But it’s $44. 


from LifeHacker https://ift.tt/7I0eXBc

This post is part of Find Your Fit Tech, Lifehacker's fitness wearables buying guide. I'm asking the tough questions about whether wearables can really improve your health, how to find the right one for you, and how to make the most of the data wearables can offer.

A fitness tracker’s job isn’t done when you finish your workout, or even when you take your last steps of the day. There are devices that excel at tracking how long and how well you slept, and devices that attempt to tell you when you’re well-recovered and ready for your next challenge. Here are my picks for the best of this category. 

What to look for in a sleep/recovery tracker

Where our other buyers’ guides are almost entirely about which smartwatch to pick, the recovery-oriented devices are different. Some come in the form of a watch, but the two standouts in this category—the Oura ring and the Whoop band—aren’t watches at all. Neither has a screen for you to look at; they merely gather data and present their conclusions in a smartphone app. They also aren’t (necessarily) worn on the wrist. That’s great news for people who want something minimalist and distraction-free. But that’s not everyone. Here are the questions to ask yourself when you’re shopping around.

Do you want a sleep tracker, or a smartwatch that can track sleep? 

Before you start looking at sleep-specific devices, it’s important to ask yourself whether you want sleep tracking as a feature of a device that does other stuff, or if you truly want a device that’s dedicated to sleep and recovery tracking. 

Most general-purpose smartwatches can do adequate sleep tracking. They’ll give you a decent idea of how late you went to bed, how many hours of sleep you tend to get, and they’ll often report some recovery metrics as well, like your resting heart rate. (Even my old Series 4 Apple Watch with its less-than-24-hour battery life can track your sleep times and resting heart rate. Just charge it while you shower.) 

I’ll include a smartwatch or two below, but if you really want a smartwatch, check out our other guides for health tracking and for running. You may find the watch you really want in one of those categories.

Are you OK with paying for a subscription? 

My two top picks both require a subscription to make the most of your data. Whoop sells the subscription as their primary product, with the band as a thing they throw in to go with it. Oura, meanwhile, will sell you a ring and give you sleep and recovery scores for free; but to get the detailed information you probably came for, you’ll need to pay up. 

Do you need accurate activity tracking? 

All of these wearables say they can track your heart rate during exercise, but that doesn’t mean they do it well. 

Oura’s niche use as a sleep tracker evolved from the fact that it’s really hard to get accurate heart rate data from a ring while you’re moving. (Longtime readers will recall that I reviewed the Motiv ring in 2018, and found that it was useless for exercise, but great as a sleep tracker.) Oura turned its ring’s weakness into a strength: Since it needs you to be very still and quiet to take readings, they positioned it as a sleep tracker, which needs to do that exact thing really well. 

But that means that when they added activity tracking later on…well, it’s not great. It’s better than I would have expected, to be sure. But it would definitely not be my choice for tracking exercise. I wear an Oura ring every day, but I’ll actually strap on a watch when it’s time to go for a run. 

Whoop does a better job than Oura, but it still has its issues. I’ve found it can easily get confused about my actual heart rate; the numbers will seem low, and then I’ll wiggle the band, and suddenly I’m seeing a 160 heart rate instead of 140. That’s a pretty big margin of error. Many people find that the Whoop is good enough, most of the time, but if you need really accurate exercise metrics you’ll probably be happier with a more traditional fitness tracker instead.  

The best sleep and recovery trackers for every need

Best for minimalists: the Oura ring ($299)

This one is my personal favorite; I fell in love with the Oura ring when I reviewed it years ago. If you hate wearing wristwatches and don’t really care about activity tracking, this is the device for you. 

The Oura gives accurate resting heart rate (RHR) and heart rate variability (HRV), two metrics that come more or less directly from its sensors, with minimal layers of interpretation. Both can tell you something about your stress and fatigue levels. Generally, if you’re well-rested and not under too much stress, your RHR will be low and your HRV will be high. I routinely see an elevated RHR if I’m sick, if I’ve been drinking or staying up late, or if my weightlifting training has been putting a lot of stress on me. On the flip side, RHR can lower over time as you improve your cardio fitness. 

Oura’s app then uses those metrics, and other data it’s collected about you, to give you sleep and readiness scores. The sleep score is about how long and how well you slept. The readiness score is highest when you’re under the least stress (low RHR, high HRV). But I find these scores less useful than the raw data they’re built on. An Oura ring without a subscription only provides these scores, without the raw data. It’s not worth it. 

Oura is supposed to be the best wearable for tracking sleep stages, and that may be true, but no wearable is actually tracking your sleep stages accurately. Pay more attention to your total sleep time, which it’s relatively good at detecting, not the time in each stage or the overall sleep quality.

One more, important note about activity tracking: you will not want to wear this during workouts where you’re lifting weights or hanging from a pullup bar. The ring is chunky enough it will interfere with your grip and dig into your skin. You won’t be able to do your best lifts while you’re wearing it. And if you care about the ring’s appearance, lifting weights will definitely scratch it up. I lift a lot, so I leave my ring on the charger when I head to the gym.

So if you can’t lift in it, and it’s not great at activity tracking or sleep staging, why wear one? Honestly, because I can forget that it exists, and still get all the benefits of knowing what my RHR and HRV have been, pretty much every night, for the last three and a half years. (I never stick with a wearable that long.) The metrics help me to understand whether I’m recovering well enough from my daily training, and remind me to pay a little extra attention to my sleep and stress when training gets tough.

  • Oura ring, $299 for the Heritage shape in silver, gold, black, or matte black (“stealth”). The subscription is an additional $5.99/month, with a one-month free trial when you sign up.

Best for athletes: Whoop band ($249, sorta)

If you want something that can track activities, but works with an app that is recovery-focused rather than exercise-focused, you probably want a Whoop band. 

If you’re happy to strap a gadget to your wrist, great—that’s the easiest way to wear a Whoop. It will look like a watch, except with no screen (the fabric band covers the spot where the screen would be, if it had one). If you don’t want a wristband, the Whoop device can also be strapped to your arm, between your deltoid and bicep (they call it a “bicep band”). This was my favorite way to wear it. 

The company also sells sports bras and other items of clothing that have a little pocket for the device. (You take the little plastic brick off its strap, then insert it into the pocket.) So even if you hate wearing a watch or you’re doing exercises that aren’t compatible with a wristband, you can still wear this during your workout. 

One of Whoop’s characteristic features is that you can wear it 24/7. Instead of plugging it in to charge, there is a little detachable battery that you plug in. Then, for an hour or so every couple of days, you slide this battery onto your Whoop band like a tiny backpack. When it’s fully charged, the indicator light will change colors and you can slide it off. 

Besides tracking your sleep, the Whoop can also track activity—although, as we noted above, it’s not as accurate as some of the more traditional gadgets. (If you really want the most accurate heart rate, you’ll want to get a chest strap anyway.) 

The app models sleep and activity—which it calls Strain—as two sides of the same coin. If you did a long or hard workout, your Strain will be high, and the app will recommend an amount of sleep that will help you to recover. In the morning, it will tell you where your Recovery stands, and recommend an appropriate amount of Strain for the day’s workouts. As I’ve written before, I don’t think it’s very smart to adjust your long-term training plan based on short-term fluctuations in recovery, but how you use the data is up to you. 

  • Whoop band, free with $30/month subscription, or $249 if you pay for the full year in advance. There is also a one month free trial that loans you a pre-owned device.

Best smartwatch option: Garmin Venu 3 ($399)

All of Garmin’s running watches include recovery metrics, including the Body Battery. Like Whoop’s approach, this sees exercise and sleep as sort of opposite forces. Your Body Battery will be closer to 100% if you’ve been sleeping well and haven’t done much strenuous exercise lately. It will drain as you exercise, or if you’re under a lot of stress. Sleeping fills it back up again. 

For a budget option, you can get this metric on, say, a $119 refurbished Forerunner 45. But if you’d like to buy a new smartwatch just for sleep tracking, I’d suggest the Garmin Venu 3. 

The Venu 3 has the Body Battery feature, as well as a Sleep Coach that will tell you how long you slept, how that compares to how much you needed, and it will recommend how much you should try to sleep tonight. The recommendations are based mainly on your HRV (one of those recovery metrics it can read from its sensors) and your recent sleep and activity history. The Venu 3 also has nap detection, by the way, so you’ll still get credit for falling asleep watching a movie—but it also won’t confuse that with your regular night’s sleep.


from LifeHacker https://ift.tt/qUGNRo7