Posted on

User-centric security should be core to cloud IAM practice

Cyber attacks, phishing, and ransomware incidents are predominantly user-facilitated threats; their success is reliant on a human interaction. Relying solely on the next generation of technology to solve this issue is misguided; we cannot address a human problem with technology alone.

Security must shift to a more people-centric approach, as it is ultimately the individuals who require access, whose identities must be managed, and who need to be authenticated and it’s the people who are currently enabling the failures, even when that is inadvertent. We must recognise that this is fundamentally a people challenge, not merely a technological one. By prioritising human factors in our security strategy, we can build a more effective and resilient posture towards cyber attacks, phishing and ransomware.

This challenge isn’t new; it may seem so because we’re framing it as IT-centric. In reality, identity and access management (IAM) has been a fundamental practice for centuries, rooted in the principles of least privilege and need to know. What we often overlook is the importance of understanding our underlying information assets and identifying who truly needs access to them. By facilitating that access in a seamless manner, we enhance user experience while maintaining security. If we restructured our information assets to be more logical, user-friendly, and aligned with business functions, we could significantly improve our ability to manage access effectively.

Training and awareness continue to be neglected and underfunded, while technology receives a bigger share of attention and budget. Numerous reports, surveys, and presentations from security industry leaders consistently emphasise that effective training is crucial for enhancing our resilience against attacks. It’s time to prioritise investment in training and awareness, recognising them as vital components of a robust security strategy.

Technologies play a supportive role in combating these attacks but they ultimately depend on individuals to make the right choices. To build an effective defence, we must empower well-trained, security-conscious personnel who are backed by the right technology. Instead of having IT impose access restrictions arbitrarily, let’s engage our teams in identifying their access needs. By prioritising collaboration and understanding, we can create a security framework that truly protects both our people and our organisation.

Additionally, we must recognise that overly restrictive security practices can drive individuals toward risky behaviours, especially when they struggle to perform their jobs effectively. Just as laws differ in their approach, security policies should not mirror a Napoleonic framework, where users are limited to only what they are explicitly permitted to do. Instead, we should embrace a model that empowers users to fulfil their roles while maintaining security. It’s essential for security teams to collaborate with employees to identify solutions that enable safe and effective job performance, fostering a culture of trust and responsibility.

Shifting away from rigid rules is essential for progress, but it’s understandable that security professionals may feel hesitant, as clear-cut rules can be a comfort for some. User-centric security should be the future for genuine resilience.

Source

Posted on

iOS 18.2 just made the iPhone 16’s Camera Control even better

I had been looking forward to the iPhone 16’s Camera Control button ever since it first popped up in early rumors. After over a month with the iPhone 16 Plus, however, the Camera Control turned out to be a somewhat large disappointment for this longtime iPhone user. The button works as intended. It opens the camera app faster than before. It just doesn’t work well for me. I hold the iPhone in my left hand, so there’s no convenient way to reach the button. My protective case makes it even harder than it should be.

I’d love it if Apple made radical changes to the iPhone’s buttons that would let me swap the location of the Camera Control button with a unified Volume button. That’s not going to happen anytime soon, but Apple is working to make the Camera Control better in the meantime. A new “Require Screen On” option that just appeared in iOS 18.2 beta 3 is one way Apple is improving this feature.

Go to the iPhone 16’s Settings app, tap Display & Brightness, and look for the new Require Screen On toggle at the bottom. That is, after you install iOS 18.2 beta 3, of course.

The new toggle is enabled by default, which matches the current behavior of the Camera Control button. If the iPhone 16 screen is off and you press the button, the display will turn on. A second press will invoke the camera, and a third press will let you take photos.

Tech. Entertainment. Science. Your inbox.

Sign up for the most interesting tech & entertainment news out there.

By signing up, I agree to the Terms of Use and have reviewed the Privacy Notice.

If you disable the Require Screen On setting, you can open the camera even when your screen is off. This might be something some content creators want. They’d get even faster access to the camera, which will help them capture photos and videos immediately.

The obvious downside is that you might get accidental Control Center taps after disabling the feature, especially if you’re not using a case.

Using the Camera Control button to take a photo on the iPhone 16 and 16 Plus.Using the Camera Control button to take a photo on the iPhone 16 and 16 Plus. Image source: Apple Inc.

On the other hand, if you have Raise to Wake enabled from the same Display & Brightness menu, you don’t need to disable the new Require Screen On setting. Simply raising the phone to take a photo or record a video will turn on the screen, so your Camera Control press will bring up the camera on the first press. The next photo or video recording will then be just one tap away.

Separately, Require Screen On should also let you turn on Visual Intelligence faster than before. That’s Apple’s equivalent to Google Lens, which lets Apple Intelligence see what’s around you to provide contextual information.

If you’re not on the iOS 18.2 beta, you’ll have to wait a few weeks to see the Require Screen On appear in the iPhone 16’s Settings app. As for other iPhone versions that can run iOS 18.2, you won’t see the setting because your iPhone lacks a dedicated camera button.

Source

Posted on

Nvidia’s rumored CPU could pack integrated GPU to rival RTX 4070 mobile – should AMD and Intel start to worry now?

  • Nvidia APU rumored to equal RTX 4070 laptop GPU in performance
  • Laptops are already being made with the APU, including from Alienware
  • The Arm-based APU could outgun AMD’s Strix Halo by miles for efficiency

Nvidia’s apparent plan to make an Arm-based CPU for PCs – in conjunction with MediaTek – raised some eyebrows, certainly, and now we’re hearing a bit more about how powerful said APU from Team Green might be in terms of its integrated graphics.

For the uninitiated, an APU is an all-in-one chip (packing a processor, alongside an integrated GPU and NPU) and with a powerful enough graphics solution, these can make for a great engine for thin-and-light gaming laptops, dispensing with the need to have a separate graphics card in the chassis. (They’re also ideal for PC gaming handhelds, too).

Moore’s Law is Dead (MLID) has some fresh info on Nvidia’s rumored Arm-based SoC, namely that said integrated graphics will match the RTX 4070 laptop GPU (with the chip running at around 65W).

MLID further notes that laptop makers are already working with Nvidia to realize this APU, and there’s a rumored deal with Alienware on the boil.

We could see new entrants bursting onto our best gaming laptop list powered by the Nvidia APU as soon as the end of 2025, or the leaker still believes that’s a possibility – though we may realistically be waiting until 2026.

It is, after all, a big move for Nvidia, and one that Team Green and its partners will want to get right.

PS5 Pro Review, Nvidia APU Performance Leak, AMD RDNA 4, XBOX Future | NX Gamer | Broken Silicon 283 – YouTube PS5 Pro Review, Nvidia APU Performance Leak, AMD RDNA 4, XBOX Future | NX Gamer | Broken Silicon 283 - YouTube Watch On

Analysis: The battle against a Halo product

If you recall, AMD also has powerful APUs on the cards, and is closer to launch than Nvidia – in fact, Team Red is expected to reveal new Strix Halo chips at CES 2025 (alongside a whole heap of other goodies).

{ window.reliablePageLoad.then(() => { var componentContainer = document.querySelector(“#slice-container-newsletterForm-articleInbodyContent-ZpcEZKJdQ5A7Pqu5VzCBub”); if (componentContainer) { var data = {“layout”:”inbodyContent”,”header”:”Get the best Black Friday deals direct to your inbox, plus news, reviews, and more.”,”tagline”:”Sign up to be the first to know about unmissable Black Friday deals on top tech, plus get all your favorite TechRadar content.”,”formFooterText”:”By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.”,”successMessage”:{“body”:”Thank you for signing up. You will receive a confirmation email shortly.”},”failureMessage”:”There was a problem. Please refresh the page and try again.”,”method”:”POST”,”inputs”:[{“type”:”hidden”,”name”:”NAME”},{“type”:”email”,”name”:”MAIL”,”placeholder”:”Your Email Address”,”required”:true},{“type”:”hidden”,”name”:”NEWSLETTER_CODE”,”value”:”XTR-D”},{“type”:”hidden”,”name”:”LANG”,”value”:”EN”},{“type”:”hidden”,”name”:”SOURCE”,”value”:”60″},{“type”:”hidden”,”name”:”COUNTRY”},{“type”:”checkbox”,”name”:”CONTACT_OTHER_BRANDS”,”label”:{“text”:”Contact me with news and offers from other Future brands”}},{“type”:”checkbox”,”name”:”CONTACT_PARTNERS”,”label”:{“text”:”Receive email from us on behalf of our trusted partners or sponsors”}},{“type”:”submit”,”value”:”Sign me up”,”required”:true}],”endpoint”:”https://newsletter-subscribe.futureplc.com/v2/submission/submit”,”analytics”:[{“analyticsType”:”widgetViewed”}],”ariaLabels”:{}}; var triggerHydrate = function() { window.sliceComponents.newsletterForm.hydrate(data, componentContainer); } if (window.lazyObserveElement) { window.lazyObserveElement(componentContainer, triggerHydrate); } else { triggerHydrate(); } } }).catch(err => console.error(‘%c FTE ‘,’background: #9306F9; color: #ffffff’,’Hydration Script has failed for newsletterForm-articleInbodyContent-ZpcEZKJdQ5A7Pqu5VzCBub Slice’, err)); }).catch(err => console.error(‘%c FTE ‘,’background: #9306F9; color: #ffffff’,’Externals script failed to load’, err)); ]]>

Sign up to be the first to know about unmissable Black Friday deals on top tech, plus get all your favorite TechRadar content.

Interestingly, the Strix Halo flagship APU has also been strongly rumored to have seriously peppy integrated graphics, and comparisons have been drawn to the discrete RTX 4070 laptop GPU here, as well – or that Team Red’s top chip might even be slightly more powerful.

Still, in Nvidia’s favor, it’s not clear if that flagship APU will serve gaming laptops, or just workstations, as we’ve discussed in the past. And even if the Nvidia APU is a bit behind in terms of the performance of its integrated GPU, it’s targeting much better efficiency. (Strix Halo rumors point to 120W for the flagship, and as we see here, 65W is mentioned for Nvidia’s effort – that kind of power difference is huge in the world of portables).

We can also expect a seriously powerful NPU from Nvidia, and AMD Strix Halo for that matter.

What’s going to be the problematic area for Nvidia is that its APU is Arm-based, so will run Windows on Arm with its inherent drawbacks, as seen with current Snapdragon SoCs. Whereas AMD’s Strix Halo is a traditional x86 chip and won’t have any compatibility (or performance overhead) worries – though come 2026, the picture for Arm chips in that respect may have changed a great deal. Microsoft is certainly betting on that, and Nvidia too, no doubt – if this rumor is right.

More competition in the mobile CPU arena will be a prospect that Intel isn’t keen on. Team Blue has a big business in producing laptop CPUs, an area it continues to be strong in despite all the woes around its desktop processors. Is that going to change with Nvidia’s entry into the laptop CPU market? It’s not what Intel needs right now, that’s for sure.

Via TweakTown

You might also like…

Source

Posted on

AMD’s Ryzen 7 9800X3D is hot stuff

  • AMD’s Ryzen 7 9800X3D has just burnt out on an MSI X870 motherboard
  • The user on Reddit reports an error code of ‘00’, indicative of a CPU issue
  • There’s currently no confirmation from AMD on whether this is an issue on its end

The AMD Ryzen 7 9800X3D has been the recipient of much acclaim thanks to the upgraded 3D V-Cache for gamers, placing it at the top of our best gaming CPUs ranking. However, one troubling user report has revealed the processor burned out on an AM5 motherboard socket. Could this be an error on AMD’s part?

The unlucky Reddit user shared images showcasing the new 9800X3D processor with burn damage, along with the MSI Tomahawk X870 motherboard socket burnt out with bent pins. The user also mentioned a ‘00’ error code that appeared when attempting to post (power-on self-test) their new chip.

The 00 error code can indicate a random boot or CPU issue (it’s a fairly common error code), and Wccftech noted that other users had posted about the same code on the Tomahawk X870 over on MSI’s own forums, though it’s unlikely those users had the same issue. We’ve seen a familiar matter occur with the 9800X3D’s predecessor (the 7800X3D), which left users with burnt processors and motherboards (eventually fixed via BIOS updates for multiple mobo partners).

An AMD Ryzen 7 9800X3D on a desk

(Image credit: Future / John Loeffler)

Wccftech claims the motherboard could hold responsibility for the burnout issue in this instance, with the assumption that the X870 pushed voltages through the gold contact pads ‘excessively’, leading to the CPU burning out. However, some commenters in the Reddit thread have also speculated that the board itself was defective based on the images provided by the affected user, since it appears that part of the socket’s plastic casing is chipped – therefore preventing the chip from being properly seated in the socket.

There’s ultimately no confirmation as to whether the blame for this lies with AMD, MSI, or the PC user themself. Still, one thing we can say is that this certainly wouldn’t be unfamiliar territory for users of newly launched AMD processors.

Should you still buy the Ryzen 7 9800X3D now?

Aside from the supposed burning issue, getting your hands on the Ryzen 7 9800X3D is already a tough mission – it’s currently sold out completely and new stock isn’t expected to arrive until December. Not only are you up against high demand, but scalpers have already made the new processor their latest target.

If there is a serious underlying issue here, stock delays could actually work in your favor if you’re hoping to pick up this speedy new gaming CPU. If Wccftech is correct and the burnout was indeed caused by excessive voltage, we could see it fixed via a BIOS software patch by MSI by the time a new batch of stock arrives.

{ window.reliablePageLoad.then(() => { var componentContainer = document.querySelector(“#slice-container-newsletterForm-articleInbodyContent-bCefJywkbK3B5qSwQyMhTV”); if (componentContainer) { var data = {“layout”:”inbodyContent”,”header”:”Get the best Black Friday deals direct to your inbox, plus news, reviews, and more.”,”tagline”:”Sign up to be the first to know about unmissable Black Friday deals on top tech, plus get all your favorite TechRadar content.”,”formFooterText”:”By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.”,”successMessage”:{“body”:”Thank you for signing up. You will receive a confirmation email shortly.”},”failureMessage”:”There was a problem. Please refresh the page and try again.”,”method”:”POST”,”inputs”:[{“type”:”hidden”,”name”:”NAME”},{“type”:”email”,”name”:”MAIL”,”placeholder”:”Your Email Address”,”required”:true},{“type”:”hidden”,”name”:”NEWSLETTER_CODE”,”value”:”XTR-D”},{“type”:”hidden”,”name”:”LANG”,”value”:”EN”},{“type”:”hidden”,”name”:”SOURCE”,”value”:”60″},{“type”:”hidden”,”name”:”COUNTRY”},{“type”:”checkbox”,”name”:”CONTACT_OTHER_BRANDS”,”label”:{“text”:”Contact me with news and offers from other Future brands”}},{“type”:”checkbox”,”name”:”CONTACT_PARTNERS”,”label”:{“text”:”Receive email from us on behalf of our trusted partners or sponsors”}},{“type”:”submit”,”value”:”Sign me up”,”required”:true}],”endpoint”:”https://newsletter-subscribe.futureplc.com/v2/submission/submit”,”analytics”:[{“analyticsType”:”widgetViewed”}],”ariaLabels”:{}}; var triggerHydrate = function() { window.sliceComponents.newsletterForm.hydrate(data, componentContainer); } if (window.lazyObserveElement) { window.lazyObserveElement(componentContainer, triggerHydrate); } else { triggerHydrate(); } } }).catch(err => console.error(‘%c FTE ‘,’background: #9306F9; color: #ffffff’,’Hydration Script has failed for newsletterForm-articleInbodyContent-bCefJywkbK3B5qSwQyMhTV Slice’, err)); }).catch(err => console.error(‘%c FTE ‘,’background: #9306F9; color: #ffffff’,’Externals script failed to load’, err)); ]]>

Sign up to be the first to know about unmissable Black Friday deals on top tech, plus get all your favorite TechRadar content.

We’re hoping that this is just an isolated issue that doesn’t indicate more serious problems, as spending hundreds of dollars on new hardware just for it to die on you almost immediately isn’t ideal, to say the least…

You might also like…

Source

Posted on

Feel good app Portal updated with widgets, new landscapes, and macOS Sequoia support

Portal for Mac is one of my favorite apps on the Mac App Store. Created by indie developers from Portal Labs, it aims to help people care for their well-being even when they have to be in front of a screen for countless hours each day.

To do that, you can select between three options (Focus, Create, and Escape), and the app will help you set the tone with dozens of landscapes that can help you focus on a task, feel more creative, or just relax for a moment.

By taking over your wallpaper with cinematic and vivid landscapes, Portal for Mac uses spatial audio to immerse you in breathtaking views while working, studying, and relaxing. These views range from Old Packhorse Bridge in Dartmond, UK, to the beauties of a Night Cloud Forest in Costa Rica.

In the past few weeks, they have updated Portal to take full advantage of macOS Sequoia. In addition, they recently released a new version of the app with new landscapes, widget support, multi-display panning, and more. These are the highlights:

Tech. Entertainment. Science. Your inbox.

Sign up for the most interesting tech & entertainment news out there.

By signing up, I agree to the Terms of Use and have reviewed the Privacy Notice.

Portal for Mac now offers widget support. Image source: José Adorno for BGR

  • Desktop widgets: Portal for Mac adds widget support with two options, now Playing and Open Portal;
  • Reorderable Favorites: Organize your favorite portals exactly how you like. Drag and drop them in whatever order you prefer;
  • Offline Playback: Users can download their favorite portals and enjoy them wherever they are;
  • Start Playback on launch: Combine the “Launch at the login” option, and Portal will be there every time you start your Mac;
  • Multi-display Spanning: Portal for Mac lets you span 8K motion visuals across multiple displays;
  • Intelligent framing: Whether you work in landscape, portrait, or ultra-wide, Portal’s visuals always look their best with Intelligent Framing;
  • New Costa Rica collection: A new Costa Rica collection takes you right into the heart of Costa Rica’s pristine rainforests. The developers say these images were captured to ” evoke feelings of escape, exploration, and soft fascination; it draws on the latest research on the restorative power of nature on our minds.”

A little more about Portal for Mac

Portal for MacImage source: José Adorno for BGR

According to the developers, Portal for Mac has a unique approach for users willing to focus and relax. “While most productivity apps look inwards at how our habits and behaviors can make us more productive, we focus on looking outwards and at the impact that our surroundings have on how we think, feel & act.”

The idea behind Portal for Mac is to instantly transform any space into a “beautiful haven for productive work.” The developers say that more than just finding ways to focus on several tasks, studies show that improving the environment we live and work in can help improve that in the long term.

Portal for Mac is available via the Mac App Store with a free 7-day trial for all customers. It costs $69.99 (annual) or $12.99 (Monthly). You can also buy a lifetime pass for a one-off cost of $299.99. In addition, all subscriptions include full access to both Portal for Mac and iOS.

Source

Posted on

Lords shoplifting inquiry calls for facial recognition laws

Lords have expressed “serious concerns” over the use of live facial recognition (LFR) technology by retailers, and are calling for new laws to ensure its safe and ethical use by private companies.

In May 2024, the House of Lords Justice and Home Affairs Committee (JHAC) launched an inquiry into tackling shoplifting, which partly focused on how police and retailers are using both live and retrospective facial recognition (RFR) to deal with retail crime.

Following its inquiry, the JHAC has now written to the Home Office detailing its concerns over facial recognition in retail, and is calling on the UK government to bring forward new legislation outlining general principles and setting minimum standards for the use of new technologies, especially when being used by private companies for crime prevention purposes.

Highlighting the fact that retailers will often collaborate with one another to create localised databases and watchlists of known shoplifting offenders, the Lords explained there is no criminal threshold for being included, which could lead to a number of issues.

“This means an individual can be placed on a private facial recognition watchlist and blacklisted from their high street (and subscribing retailers across the region) at the discretion of a security guard, without any police report being made and without the individual being informed that they have been added to a watchlist,” they told the Home Office.

“We are concerned about the implications of what is effectively privatised policing, the hidden nature of the decisions being made on the basis of data matched with entries in a private database, and the lack of recourse for individuals who may have been wrongly entered in the database due to a misidentification,” they added.

“We are concerned about potential GDPR [General Data Protection Regulation] infringements and the risk of misidentification due to bias and discrimination within the algorithms.”

Risks to rights and freedoms

Noting evidence from campaign group Big Brother Watch, the committee highlighted that the European Union’s (EU’s) AI Act “broadly prohibits” the use of LFR given the extraordinary risks it poses to individuals’ rights and freedoms, adding that there is also a risk of bias and discrimination from the algorithms in use, with studies showing the systems are less accurate for people with darker skin.

While the committee heard in September 2024 from retailers that LFR would be of limited use in tackling shoplifting due to the associated safety and ethical concerns (which it believes can be cleared up through new primary legislation), they also said working with police to automatically identify offenders after the fact with RFR should be standard practice.

Paul Garrard, the Co-op Group’s public affairs and board secretariat director, for example, told Lords that while the organisation itself does not use LFR to detect shoplifting in real time, it will compile an “evidence pack” for police when reporting a theft, which will include material like CCTV and staff body-worn camera footage to be run through RFR software.

He added that although some police forces will take the compiled footage and compare it with photos contained in the Police National Database (PND) – which holds millions of custody images, many of which are being unlawfully retained by the Home Office – it is not currently standard practice for police to automatically check the images provided against the database.

In October 2023, the UK government launched a business-police partnership called Project Pegasus, part of which revolves around 14 of the UK’s biggest retailers – including M&S, Boots and Co-op – sharing CCTV footage with forces so they can run it through the PND using RFR software.

Noting the “positive steps made by Pegasus to tackle organised retail crime”, the JHAC said it would welcome the continuation of the scheme – which focuses specifically on the organised criminal aspects of shoplifting rather than local or prolific offenders – adding that it should receive a further year of Home Office funding.

“We recommend the development of improved reporting systems to expedite the process by which retailers can report crime to the police,” it said. “This includes the introduction of a ‘retail flag’ to identify in the Police National Database and criminal justice case management systems when a crime has taken place in a retail setting.”

Reiterating previous findings

The JHAC also highlighted its previous investigation into advanced algorithmic technologies by UK police – including facial recognition and various crime “prediction” tools – which found the tech is being deployed without a thorough examination of their efficacy or outcomes, with police and the Home Office essentially “making it up as they go along”.

It further described the situation as “a new Wild West” characterised by a lack of strategy, accountability and transparency from the top down. “Given the potential costs of technologies and the problems that can and do arise from their implementation, including with respect to privacy rights, freedoms and discrimination, we consider that a stronger legal framework is required to prevent damage to the rule of law,” it said.

A short follow-up inquiry by the JHAC specifically looking at the use of LFR by police also found that they are rapidly expanding their use of the technology without proper scrutiny or accountability, and lack a clear legal basis for their deployments. However, the government claimed in the wake of the inquiry that there is already a “comprehensive legal framework” in place.

“We reiterate our earlier recommendation and believe there is a need for regulation of new technologies, particularly in relation to the use of it by private companies for crime prevention measures,” the JHAC told the Home Office in its shoplifting inquiry letter. “We consider that this approach would strike a balance between concerns that an overly prescriptive law could stifle innovation and the need to ensure safe and ethical use of technologies.”

Computer Weekly contacted the Home Office about the JHAC inquiry’s findings, including whether it still holds the position that there is already a comprehensive framework in place governing the use of facial recognition.

“Shoplifting is at a record high,” said a Home Office spokesperson. “This government is taking strong action by removing the £200 threshold for low-value shoplifting and making it a specific criminal offence for assaults on shopworkers. Facial recognition technology is an important tool that is helping the police identify offenders and bring them to justice. We constantly review its use to keep our streets safe and ensure we restore public confidence in our police.”

Both Parliament and civil society have repeatedly called for new legal frameworks to govern law enforcement’s use of biometrics – including two of the UK’s former biometrics commissioners, Paul Wiles and Fraser Sampson; an independent legal review by Matthew Ryder QC; the UK’s Equalities and Human Rights Commission; and the House of Commons Science and Technology Committee, which called for a moratorium on LFR as far back as July 2019.

During his time in office before resigning in October 2023, Sampson also highlighted a lack of clarity about the scale and extent of public space surveillance, as well as concerns over the general “culture of retention” in UK policing around biometric data.

Source