Social Items

The current version of macOS High Sierra has a bug, which could allow anyone to unlock the App Store preference pane by typing any password, though not as serious as the infamous root login bug that earlier hit macOS password prompts.

While the App Store settings are unlocked for administrators by default, there are little chances that locked down system settings are at risk, however if someone got access they could disable automatic security updates to take advantage of known vulnerabilities.



Apple, already has issued a fix for the bug in the latest version of macOS 10.13.3, which is currently still in beta and may likely be released this month.

For now, keep your App Store preferences locked down, and ensure that you log out as administrator when you are away, alternatively, you should use a standard account rather than the administrator login.

And about the recurring macOS password vulnerability, Apple had apologized in a statement, and confirmed that it was "auditing its development processes" to help prevent this mishap from happening again.

Albeit, the vulnerability doesn't affect macOS Sierra or any other previous version of the operating system.

Beware: Apple's macOS High Sierra password prompt bug is real



The Spectre vulnerability affects modern microprocessors with speculative execution, and thus the data cache - programs that accept requests may be tricked into reading private data, consequently, can modify the state of the data cache.

While the exploit hasn't hit the world's biggest microprocessors in the wild, as it's almost unnoticed, most browser makers have responded by updating their software to fend off a possible attacks based on Spectre.

The exploit first spotted by Google's Project Zero security team who identified the multiple flaws in processors designed by Intel, AMD and ARM, though not-yet-exploited in the vast bulk of the world's microprocessors.

Spectre could easily be leveraged by criminals using JavaScript attack code posted on hacker-run or compromised sites, thus can also violate browser sandbox technology, by mounting them via portable JavaScript code.

The Google research team in a proof-of-concept demonstrated how an attacker could use JavaScript to read the address space of a Chrome process, via open tab, and also access site credentials that had just been opened.

Albeit, the most important fixes distributed so far have been from chip makers and operating system vendors, who have updated their applications.

Browser makers, including OS developers, are about now working on patches, as best as could be done without replacing the CPU, but effective against the flaws grouped under the umbrella terms of Meltdown and Spectre.

Google Chrome for Windows, macOS and Linux version 63 which debuted about a month ago, came with a new security technology, called "Site Isolation." Google has urged its customers to enable the feature - which is off by default in Chrome 63 - to effect better defence against Spectre attacks.

Also Google has promised more anti-Spectre defenses in Chrome 64, slated to debut in the week of January 21, with additional mitigations, and highlighted modifications to Chrome's JavaScript engine, V8.

Microsoft has equally issued updates for Internet Explorer (IE) and Edge for Windows 10, as well as IE patches for Windows 7 and Windows 8.1 this week.

The Microsoft updates can be downloaded in the form of the usual Security Monthly Quality Rollup for Windows 7/8.1 or the Security Only Quality Update for the same versions.

And for Firefox users, Mozilla has updated its browser to version 57.0.4 with the same two mitigations as other browser developers.

While Apple confirmed that the December updates to macOS and iOS introduced defensive measures to help defend off Meltdown, and the Spectre vulnerabilities. The company also promised to release an update for Safari on macOS and iOS in the coming days to mitigate the exploits.

How Browser Vendors respond to fight the Spectre Vulnerability



Mark Zuckerberg, through his official page had pledged to fix the seemingly top issues with the social network this year, which ranges on questions of history, civics, political philosophy, media, government and technological rhetoric.

The Facebook CEO's major emphasis remains on thwarting the spread of false information, and the meddling with the 2016 U.S election by Russia, which blame was attributed to the tech giants: Facebook, Google and Twitter for their inability to control the activities of users with evil intents.

While this isn't the first time Zuckerberg has promised to tackle the issue, this latest move will be more wide ranging than mere managing of decisions and shaping the company's rules.

Albeit, the Facebook issues extends far beyond Russia, even as critics claim the company’s central role has undermined the news business, and sort to “hijack” our minds with products designed to keep us addicted to the social network.

Facebook had recently changed its algorithmic priorities in the news feed, placing “reactions” at per with the standard “like,” and the company appears to be pushing further into the goal of emotion-centered engagement, especially with the algorithmic reinforcement serving as megaphones for outrages.

Thus, an important step in the countering of misinformation, hate speech and propaganda — Facebook should take is to abandon its focus on emotional signal-as-engagement system.

Facebook could as well offer a filter that would keep any post (or share) of an unverified account from showing up. As its set to require companies to add additional levels of verification, and have a label that different them from individual users.

The company should also make its executives readily available to answer to the press, and be upfront about technical challenges; more open about its mistakes and willing to answer the questions honestly.

Additionally, Facebook should open itself up to independent researchers, as it presently stands, the company is a black box - a pretty difficult one at that, and in most cases almost impossible for independent researchers to analyze social behavioral traits on the platform.

What's there to fix on Facebook in 2018?

Uber has made it mandatory for every partner driver whose account is deactivated following poor ratings from riders to undergo an online test, which can be accessed at the web address: http://t.uber.com/ssa_online and drivers are required to input their full name, with mobile number to match their Uber account details.

Albeit, there are many other reasons partner drivers account may have been deactivated, you will certainly be able to reactivate your account without too much of a hassle. While the partner drivers are indirectly responsible for the poor ratings, there's still hope to regain account, and return to full service.



But first, you will need to email Uber to know exactly why your account was disabled. Then, once you get a response, the entire situation will become clearer as to the steps to follow to regain your driver account.

The Uber online test comprises 7 different sections, and modules that covers general knowledge questions about the Uber Driver app, including the best practice for Uber drivers and safety procedures.



Without successful completion of a section you can't move over to the next, and precision in answering the different questions is rewarded with a higher percentage, whereby if a correct answer is attained in one attempt results a higher percentage mark.

And overall, if any driver fails to attain an accumulated 90% score in the test, no certificate will be issued, but you're allowed a-one-section resit (usually, only section 7) to try to recoup up to 90% to pass the test.

If successfully, the 90% mark is attained, you'll have to wait for only 24hrs to have your Uber driver account restored. Now that you are fully aware of how to reactivate your Uber driver account, it is also expected that you learn how to prevent it from reoccurring in the future.

Updated: Steps to reactivate Uber Driver Account after ban



The huge success of Bitcoin in 2017 has resulted a spike in interests on cryptocurrency, with quite a lot of technical jargon thrown around, which those who are new to crypto currency would find a little confusing.

Cryptocurrency (or crypto currency) is any digital asset that employs cryptography to secure transactions and to control the creation of additional units of the currency. While the public has shown huge interest in this new phenomenon, it won't be pretty out of place to get in tune with the concepts as it may be challenging for someone looking to learn the ropes.

So, we've sorted some terms out, though it isn't an all encompassing glossary on cryptocurrency, but may be a bit handy for those threading the crypto path for the first time!

Address

These are network point linked to wallets that are used to effect the transfer of funds between wallets. Addresses are randomly generated consisting of 26-35 alphanumeric characters, and serves as the public key in the pair of keys used by holders to digitally sign transaction.

As a security measure it is recommended that users create alternative addresses within their wallets to carry out transactions in order to secure their fund.

Bitcoin

Bitcoin is the first decentralized digital currency, as the system works without a central bank or single administrator, that is a form of electronic money independent of traditional banking system.

The transactions are verified by network nodes through the use of cryptography and recorded in a public distributed ledger called a blockchain. It's creation is credited to Satoshi Nakamoto and released as open-source software in 2009.

Altcoin

This term is used to describe cryptocurrencies other than bitcoin, that is an alternative coin.

ICO

Short for Initial Coin Offering, ICO represents instances in which a new cryptocurrency is selling advance tokens from its overall coinbase. They are especially used by developers of a new cryptocurrency to raise capital.

Blockchain

This is a type of distributed ledger, comprising of unchangeable, digitally recorded data in packages called blocks. Otherwise, it refers to the full list of all the blocks that have been mined since the creation of Bitcoin.

And some of Blockchains exclusive features are immutability and decentralized information storage capabilities, which ultimately results an incredibly strong storage system.

Other associated terms are Genesis Block (the very first block in the chain), and Block Reward (reward that is given to a miner after successfully hashing a transaction block).

Hard Fork

This is a permanent diversion from the previous blockchain, that is nodes running previous versions will no longer be accepted by the newer version. It is a radical change to the protocol that makes previously invalid blocks/transactions valid (or vice-versa), requiring all nodes to be upgraded to the latest version of the protocol software.

Soft Fork

Soft fork happens when a majority of the miners upgrade to enforce the new rules. And the old nodes will recognize the new blocks as valid, as soft fork is backward compatible.

Mining

Mining is the process through which transactions are added to a blockchain. It is simply the solving of cryptographic problems using computing hardware that also triggers the release of cryptocurrencies.

Hash

Hash is a random mathematical formula used in the verification of transaction data in the process known as mining. The process involves a variable amount of data that produces a shorter, fixed-length output.

While this list isn't an all conclusive one, as we may have left some terms out, so please you can contribute in the comments box below!

Jargon Buster: All terms related to Cryptocurrency explained!



YouTube, the video-sharing platform has been a money-spinning tool in the finger of creatives the world over, and has also helped them to create their own brand. And the top YouTubers raking in millions in earnings, includes the Nigerian, Olajide Olatunji - who has collaborated with both Xbox and Eurogamer.

From top YouTubers to the celebs you’d forgotten started their careers online, find below the comprehensive infographic on how they built their careers and made their money; brought to you by MoneyPod.

”Youtube

INFOGRAPHIC: Top YouTubers & How They made their millions

Instagram Stories allow users merge photos and videos into a slide show, and mimicks Snapchat feature with same moniker, which parent company, Facebook had previously extended the support to include Facebook platform itself.

Now, Facebook is testing Instagram Stories cross posting to WhatsApp, which feature will include decorated photos, videos and GIFs, and to last approximately 24 hours.



With a Story posted as a Status on WhatsApp, will also remain encrypted like the rest of media contents on the platform. Albeit, WhatsApp users will have the option to tap to share to WhatsApp from the Instagram sharing screen, and will still have to press “send” in WhatsApp to post the story.

The cross posting feature is based on a code that WhatsApp makes publicly available to integrate the messaging platform to third-party apps/services.

Facebook had earlier launched a click-to-WhatsApp messaging button in Facebook ads, in a bid to help to monetize WhatsApp itself. And followed suit to commence the testing of cross-app notifications between Facebook, Messenger and Instagram to alert users when they get mentions or messages in any of the platform.

The convergence of all Facebook-owned social media platform is perhaps aimed to help grow each platforms overall engagement and traffic on the already successful offerings.

Instagram to soon allow posting of Stories direct to WhatsApp

A recent finding claims that some apps on both Play Store and Apple App Store running software from a company called Alphonso is using the smartphone’s microphone to listen for audio signals in TV ads and programs.

According to Apptopia, an app intelligence firm, there are over 106 apps on Google Play and 24 on the App Store using Alphonso software, which sometimes connect users movie viewing habits to places they visit.

While most of the apps were games and aimed at children, that listen for audio signals emitted by the TVs in order to track their viewing habits.



The tracking technology is akin to Silverpush’s software that the FTC had red-flagged in 2016, which it alerted app developers that they could be in violation of Section 5 of the FTC Act, And also accused them of collecting or transmitting users TV data, without actually telling users that they were monitoring their TV viewing habits.

Alphonso’s software serves as another reminder to mobile users to be careful of what they install on their smartphone.

Smartphone users should to careful to review an app’s permissions – especially if it’s asking for unlikely access to other functions, such as a game that needs to turn on the phone microphone.

Apple and Google had long required applications to get user consent if it wants to tap into the microphone. And the iOS App Store even go as hard as providing a pop-up that enforces users to agree to the microphone usage.

It is recommended that users should check where they’ve consented to microphone use in apps. For iOS users, simply go to Settings, select Privacy > Microphone; and for Android, go to Apps & notifications –> App Permissions, then Microphone.

How Smartphone’s mic is used to track users TV viewing habits



The increasing popularity of devices like the Amazon Echo have made many consumers to get used to the idea of interacting with computers using their voice, now the new year may most probably define the application of this novelty in the Enterprise world.

Just imagine the possibilities when attending a business meeting, and having Amazon Echo (or any voice-driven device) sitting on the conference table, what ease it will afford for the enterprise.

From instant answers to common query, for instance instead of powering the PC, and opening a program like Excel to find the contact numbers, you can simply ask Alexa voice assistant on the device.

Below are three suggestions for ITs voice resolutions for 2018

  • Up until now the technology has been limited by how we interact with computers. We usually type keywords into Google as the only way we are allowed to enter information. While Interfaces to digital systems of the future will no longer be only human centric, but machine driven.
  • With an AI-driven sales tool that uses voice, type and touch, connected to a voice-enabled device would make a lot of sense.
  • Smartwatches, requiring no keyboard and infused with Alexa, even if there is no screen - provides a more natural way to interact with the device.


While Amazon is already at work to introduce Alexa for Business as a cloud service at re:Invent, but other cloud companies are also expected to follow suit in expanding voice services for developers, and making it easier to build voice into any interface.

Albeit, some cloud companies have been experimenting with Echo integration, such as Sisense, a BI and analytics tool company, had introduced Echo integration as early as 2016. Also Cisco introduced the Cisco Voice Assistant for Spark in November, employing voice technology it acquired with the MindMeld purchase to provide voice commands for common meeting tasks.

As 2018 is ushered in, even more instances of this type of integration both with the help of big cloud companies, and those trying to build something independent of those vendors, should become a norm.

These are just a few suggestions, however you can share whatever are your picks in a few lines in comments. Do have a great New Year!

3 New Year’s resolutions for Voice Interfaces in 2018

Amazon's clampdown on third-party developers who leveraged the Alexa Skills as ways to make money from their creatives, initially was met with resistance as developers questioned the rationale behind the series of new policy changes on how advertising will be supported within Alexa’s voice-enabled apps.

While the world of third-party skills associated with group of apps were sold collectively to brands that needed to reach consumers through Amazon’s connected speakers, like the Echo, and other Alexa-powered devices.

Amazon in an effort to cushion the revenue crunch on developers have introduced the Alexa skills economy which though still in its infancy, make payments mandatory to developers of Alexa Skills.



The Alexa Skills economy comprises a small but fast-growing network of independent developers, marketing companies and Alexa tools makers, saddled with the task of creating voice-activated flash briefings, games and recipes through Alexa on Amazon's Echo speaker.

Though Alexa Skills market a few years ago was worth a meager by comparison of $500,000 to the now market cap of $50 million, comprising more than 25,000 skills, according to VoiceLabs. And Alexa remains an important business for Amazon, as its expanding the assistant into millions of internet-connected gadgets and into the workplace.

The Alexa economy is increasingly important to Amazon, yet most developer complains of flaws in the system as reasons that keep serious developers away from the program. And developers also take issue with the unpredictable payouts from the rewards program.

Amazon has also introduced two new ways for developers to make money by offering in-skill purchasing, and allowing some developers to sell premium content or digital subscriptions in their skills.

The company claims it has already paid millions of dollars to developers through the Alexa rewards program, and promises expanding it to more countries in 2018.

What Amazon's new Alexa Skills economy means for Developers

Subscribe to: Posts (Atom)