Connect with us
DAPA Banner
DAPA Coin
DAPA
COIN PAYMENT ASSET
PRIVACY · BLOCKDAG · HOMOMORPHIC ENCRYPTION · RUST
ElGamal Encrypted MINE DAPA
🚫 GENESIS SOLD OUT
DAPAPAY COMING

Tech

5 Classic Electronics & Pieces Of Tech That Instantly Remind Boomers Of Their Childhood

Published

on





Baby Boomers — or Boomers for short — were born between 1946 and 1964, putting them in their sixties, seventies, and eighties today. Stepping back in time to that era reveals a world of classic and nostalgic tech with a certain charm that most modern-day devices simply don’t have. Wooden finishes on console TV sets, spinning controls to dial a rotary phone — these are things most kids today wouldn’t know about, but instantly take Boomers back to their childhood.

TV sets and rotary phones aside, Baby Boomers were also very familiar with technology that has made a resounding resurgence today: vinyl record players. Boomers will remember hitting The Twist in front of one of these with their parents, or setting the needle down on the latest rock ‘n’ roll hit – a genre that exploded in the 1950s and ’60s.

And if Boomers weren’t listening to music from their record players, they were probably using a transistor radio (which first hit the scene as the Regency TR-1 in 1954) for tunes, sports, and news. Or they may have been writing their own stories and capturing moments with a Polaroid camera. It’s interesting to take a trip down memory lane through the lens of tech, and these classic electronics are a perfectly nostalgic guide.

Advertisement

Console TV sets

If wood-finished Zenith, RCA, or GE console TV sets are nostalgic to you, there’s a good chance you’re a Boomer. Characterized by their furniture-style wooden cabinets, knobs or dials, and captivating center screen, these television sets took the United States by storm in the 1950s, ’60s, and ’70s. It was the centerpiece of the living room and something for the whole family to gather around and enjoy.

Many Baby Boomers will remember the transition from black-and-white to color television — which had actually been around since the 1920s, but wasn’t refined and popularized until the 1940s and into the ’70s — and the ubiquitous impact it had on information and entertainment distribution. 90% of US households had a television set by 1960, whether black-and-white or color. And it wasn’t just to watch “The Flintstones.”

Advertisement

1960 saw the first televised debate between presidential candidates (John F. Kennedy and Richard M. Nixon), and in 1961, Kennedy gave the first live press conference on television. There was no internet or social media to get insights on politics and the goings-on of the world — for Boomers and their parents, these console television sets were crucial to staying informed about the world around them.

Advertisement

Vinyl record players

Vinyl record players were most popular from the 1950s to the ’70s, meaning many Baby Boomers grew up listening to The Beatles and The Beach Boys on a spinning vinyl disc throughout their childhoods. For many teenagers, the vinyl record player was a way to express artistic freedom and build a music collection unique to their tastes. Instead of waiting and hoping for a song to play over the radio, they could easily share certain songs with their friends and have others introduce them to new tunes.

Like console TV sets, vinyl record players of the time were often a bit different than the ones we see in today’s vinyl resurgence. When Boomers were growing up, record players were often housed in wooden consoles and doubled as pieces of furniture. There was also a hands-on aspect that made using vinyl records enjoyable. Choosing a record from your collection, putting it on the turntable, and lowering the needle onto the track was all part of the experience. While records were eventually largely replaced by CDs, that experience is an important part of why vinyl records came back into style.

Advertisement

Transistor radios

While vinyl records brought music into Boomers’ homes, transistor radios let them take it anywhere they wanted. Coming onto the scene in the mid-1950s with the Regency TR-1, these pocket-sized radios quickly changed the way people of the time interacted with music, news, and sports. While the tabletop radios that came before them were big and bulky, transistor radios were small and light enough to carry easily. Because they were battery-powered, they didn’t have to be tied down to an outlet.

For many Baby Boomers, the transistor radio was their first piece of personal tech. Like record players, transistor radios allowed teenagers to listen to the songs and stations they wanted without having to change the channel for anyone else. And the timing couldn’t have been better with rock ‘n’ roll artists like Elvis Presley and bands like Creedence Clearwater Revival becoming popular at the time.

Nowadays, we can simply look up and stream whatever songs we want. But Baby Boomers will remember the feeling of tuning into a station on their transistor radio and hoping for their favorite song to come on — and the joy they were filled with when it finally did.

Advertisement

Rotary telephones

Rotary telephones are one of the most instantly recognizable pieces of tech on this list. Characterized by their circular dial mechanisms and curly cords, you would find rotary phones in many American households between the 1930s all the way into the ’90s. Rather than the physical buttons and touchscreens of today, rotary phones had numbered holes that you would place your finger into and rotate until the circular dial reached the stopper. Their distinct clicking sound and tactile feel became a shared memory across multiple generations.

While our smartphones can be used anywhere, rotary phones were tethered to one specific location. If the phone rang, someone had to get up to answer it. There were no text messages, notifications, or caller ID screens to check first. It was also common for the phone to sit in a busy area of the home, so conversations were rarely private if your family was around.

And for many Boomers growing up, the rotary phone was a method of connecting with their friends. You’d write their phone number down, or do your best to remember it by the time you got home, and then you’d call up your friend after school or on the weekends to hang out. It was a time when phone calls were sometimes planned ahead of time, and communication moved at a slower pace.

Advertisement

Polaroid cameras

Polaroid cameras, which came out in 1948, were one of the most exciting inventions for Baby Boomers because being able to snap a photo without needing a studio and time to develop the picture was revolutionary at the time.

Polaroid pictures became popular at family reunions, parties, and holidays. Instead of using an entire roll of film and waiting days or weeks to see how a picture turned out, you could click the shutter button and hold a physical copy a few moments later (after waving it in the air to help it develop faster). The process became part of the fun — friends and family would gather around to watch an image slowly develop from what initially looked like a blank piece of paper. By 1977, despite Kodak’s best efforts at competition, Polaroid had cornered the majority of the instant camera market.

Long before social media turned every photo into something instant and shareable, Polaroid made it possible to capture a moment and immediately pass it around the room. The distinct white border and vintage look of the photos made taking and collecting pictures a fun, spontaneous activity.

Advertisement



Source link

Advertisement
Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Tech

Signal’s Meredith Whittaker wants you to remember that AI chatbots ‘are not your friends’

Published

on

Asked about the privacy implications of chatbots like ChatGPT and Claude, Signal President Meredith Whittaker answered, “These are not your friends. These are not conscious beings. These are not sentient interlocutors.”

Whittaker made those comments in a broader interview with Bloomberg about policy, privacy, and Signal. She acknowledged that she uses AI tools “to format a document here and there,” but insisted, “I don’t ask them questions. I’m very serious about my thinking and writing, and I don’t want the process of working through an idea […] to be foreclosed or eclipsed by the response of a system that’s averaging what’s already out there.”

As for Microsoft AI CEO Mustafa Suleyman’s prediction that users could let Microsoft Copilot handle all their Christmas shopping this year, Whittaker argued this scenario — where Copilot is eavesdropping on the family group chat to determine who wants want — means giving it “access to my credit card, my browser, my Signal, the ability to message my siblings on my behalf, my home address [and] my calendar.”

“What you’ve just described is a system with very pervasive access across multiple applications and services,” Whittaker said. “In the context of Signal, it would constitute a kind of a backdoor.”

Advertisement

Source link

Continue Reading

Tech

Spider-Man: Brand New Day Swings Into a Full-Room Experience With SCREENX

Published

on

Spider-Man Brand New Day SCREENX Format
Movie studios keep hunting for ways to make a trip to the theater feel essential again. Sony Pictures landed on one clear path with its next Spider-Man film. The studio worked directly with CJ 4DPLEX to present Spider-Man: Brand New Day in SCREENX, a format built to spread the action beyond the front screen and across the side walls of specially equipped auditoriums.



Audiences who choose this version enter rooms where specific scenes continue to play out on the walls next to them. The primary story remains front and center on the enormous screen in front, but there are supplementary shots playing out to the left and right. The combination of the two produces a very broad, all-encompassing perspective that immerses you in the action rather than making you a distant spectator.

Sale


Anker Nebula P1i Portable Projector with WiFi and Bluetooth by soundcore, Flippable Design,1080P FHD, 4K…
  • Flippable Audio Magic: Rotate the 20W (2 x 10W) Dolby Audio speakers 90° side to side or 200° up and down for sound that follows your vibe, perfect…
  • True Brightness, Real Clarity: Enjoy lifelike details with TÜV‑certified 380 ANSI lumens and 1080p Full HD resolution that make every movie night…
  • Designed for Consistent Viewing: All‑glass lenses and fully sealed optical engine resist dust and wear, keeping every frame crisp and clear even…

SCREENX is powered by a multi-projection system, with one projector handling the main screen and additional ones dealing with the side walls. The photos are all aligned using smart techniques like as warping correction and edge blending, resulting in a seamless image despite the fact that the walls are at an angle to the main surface. There are no special glasses required, which is a plus. The extra content is kept under control since it only appears at specified points in the film, rather than running throughout.

Advertisement

Spider-Man Brand New Day SCREENX Format
SCREENX has been widely used by filmmakers since it first appeared in films rather than only advertisements a few years ago. The amount of extra content on the side walls has been progressively expanding. Some films may only open the walls for a few twenty or thirty minute portions, but newer films can keep them open for an hour or more. Extra material is typically created from existing film or digital elements added later in the editing process.

However, Spider-Man: Brand New Day takes a different approach to the situation. CJ 4DPLEX despatched a crew to the set while the main crew was filming. That team took specialized photographs for the side walls, and this is the first time the format has had unique on-set photography generated particularly for it from the start of a major studio film until its release. Director Destin Daniel Cretton puts it simply: CJ 4DPLEX and their team came in to shoot content for the SCREENX auditoriums.

Spider-Man Brand New Day SCREENX Format
Jun Bang, the CEO of CJ 4DPLEX, described it as an advancement of the overall SCREENX concept. They collaborated closely with Sony Pictures and Cretton, utilizing their proprietary tools to greatly expand the visual possibilities. The goal was to ensure that they preserved the director’s vision while also immersing the audience in the story, action, and Spider-Man world.

Source link

Advertisement
Continue Reading

Tech

Top 20 most streamed artists on Apple Music revealed

Published

on

It should come as no surprise that Taylor Swift, Bad Bunny, Ariana Grande, and Kendrick Lamar are among the top 20 most streamed artists of all time on Apple Music. Check out the full list.

Apple Music launched on June 30, 2015, and it celebrated 10 years of streaming with a top 500 songs list. A year on, the streamer has shared a new metric.

The new chart is the top 20 artists of all time on Apple Music, shared by Chart Data on social media. It’s an official endorsement, as Apple Music’s account reposted it and replied with a heart and trophy emoji.

It isn’t clear what prompted the post, but we are in proximity to Apple Music’s birthday, so it may simply be that. If you don’t live under the proverbial rock, none of these artists should come at any surprise.

Advertisement
  1. Drake
  2. Taylor Swift
  3. Future
  4. Youngboy Never Broke Again
  5. Bad Bunny
  6. Lil Baby
  7. The Weeknd
  8. Morgan Wallen
  9. Kanye West
  10. Post Malone
  11. Travis Scott
  12. Ariana Grande
  13. Chris Brown
  14. Kendrick Lamar
  15. Lil Durk
  16. Gunna
  17. Rod Wave
  18. Ed Sheeran
  19. Justin Bieber
  20. Eminem

Apple isn’t promoting the list on Apple Music, at least not yet anyway. If you’re interested in the top 500 song playlist, it’s still available.

Out of the twenty artists present, I have six in my library. Unsurprisingly, the vast majority of music represented here is in the rap or pop genres.

If you’d like to see something a little more personalized, there’s your Apple Music Replay. Unlike Spotify Wrapped, it is updated monthly, so your 2026 Replay is already available.

Advertisement

Source link

Continue Reading

Tech

Sonos Era 100 SL review: cheaper without any acoustic compromises

Published

on

Why you can trust TechRadar


We spend hours testing every product or service we review, so you can be sure you’re buying the best. Find out more about how we test.

Sonos Era 100 SL: two-minute review

The Sonos Era 100 SL is a wireless speaker that features nearly all the strengths of 2023’s original Sonos Era 100, but at a cheaper price. While it isn’t a surprise that there have been some trade-offs to get that cost down, I doubt they’ll be a dealbreaker for most people.

Sonically speaking, there aren’t many sacrifices at all. In the mid-range, the Era 100 SL is capable of impressive detail. When I played I Want You by Moloko, I was impressed by how well its funky guitar noises, strings and acidy synth line cut through the mix, without interfering with the wonderfully polished vocals.

Advertisement

Source link

Continue Reading

Tech

Podcast: W. Jennings’ Favorite Headphones, Tube Gear and Best Picks at AXPONA 2026

Published

on

ecoustics is a hi-fi and music magazine offering product reviews, podcasts, news and advice for aspiring audiophiles, home theater enthusiasts and headphone hipsters. Read more

Copyright © 1999-2026 ecoustics | Disclaimer: We may earn a commission when you buy through links on our site.

Source link

Advertisement
Continue Reading

Tech

Epic Is Working On A ‘Ground-Up Rebuild’ Of Its Launcher That Will Be 5x Faster

Published

on

Launcher V2 will go through a private beta before a public release.

After an Epic Games exec admitted to Eurogamer that its launcher sucks earlier this year, the company reportedly revealed that it’s working on a “ground-up rebuild” of its launcher that will be much faster than the existing version. In a presentation given during Unreal Fest, parts of which were posted on X by LuKaOnIndeedEpic said that Launcher V2 will be five times faster on an average cold start and 6.5 times faster when restoring the app from the system tray.

Epic said in its presentation that “every developer in this room and every player we have has experienced challenges with the current launcher.” Gamers have even gone to great lengths to access their free games claimed on the Epic Games Store through Steam to avoid the launcher’s slow and clunky design. As seen as part of a roadmap in Epic’s presentation, the Launcher V2 will have a private beta first, before seeing an eventual public release. Epic hasn’t detailed exact dates for the new launcher, but said in a February press release that it’s “in the process of rebuilding the underlying architecture of the Epic Games Store Launcher and plan to ship improvements this summer.”

Advertisement

Beyond the launcher improvements, Epic revealed during Unreal Fest that it would be adding a few more tweaks to its storefront. The slides shared by LuKaOnIndeed mentioned priorities like in-store patch notes, player reviews, quick-access categories and a personalized home page.

Source link

Advertisement
Continue Reading

Tech

Copilot searched your mailbox. LiteLLM handed out admin keys. Run this 5-check audit before your stack is next

Published

on

Two AI tools broke in the same way in the same two weeks, and four research teams proved it. The pattern underneath every disclosure is one sentence: enterprise AI accepts external input with no trust boundary.

On June 15, Varonis disclosed SearchLeak (CVE-2026-42824), a proof-of-concept exfiltration chain in Microsoft 365 Copilot Enterprise Search. A victim clicks a crafted microsoft.com URL, Copilot searches their mailbox, and the data leaves through a Bing SSRF. No plugins, no second click, no visible indicator. Four days earlier, Obsidian Security published a three-CVE chain against LiteLLM that carried a default low-privilege user all the way to admin and remote code execution. Two tools. Two teams. One broken boundary.

The five-check audit at the end of this article maps each gap to a CVE or a market signal from June, a command you can run before lunch, and a sentence a CISO can read to the board.

Copilot turned a trusted URL into an exfiltration engine

SearchLeak chained three weaknesses into a silent data-theft chain. The URL q parameter fed attacker instructions straight to Copilot’s LLM. A rendering race condition fired an image tag before the output sanitizer ran. Bing’s image-search endpoint, allowlisted in the Content Security Policy, routed the stolen data out. Microsoft rated the flaw critical and patched it on the back end, according to Varonis. NVD has not yet scored it; a third-party tracker lists it at 6.5 medium. The severity is contested, but the mechanism is not.

Advertisement

The escalation is the real story. This is the third Varonis Copilot exfiltration chain in twelve months, after Reprompt in January and EchoLeak in 2025. Reprompt hit Copilot Personal. SearchLeak hit Enterprise Search. Enterprise inherits the user’s full organizational permissions, so the blast radius is everything that a user can reach.

LiteLLM handed a default account to every provider key

The LiteLLM gateway holds the keys for OpenAI, Anthropic, Azure, and Bedrock behind a single proxy. The Obsidian chain runs in three moves. CVE-2026-47101, an authorization bypass, lets a non-admin mint a wildcard API key. CVE-2026-47102 promotes that caller to proxy admin through an unguarded /user/update endpoint. CVE-2026-40217 escapes the code sandbox through exec() with full builtins. Obsidian then demonstrated a reverse shell by injecting a forged tool-call response through LiteLLM’s callback mechanism. Obsidian assessed the combined chain at CVSS 9.9. The developer typed one word. The attacker popped a shell.

A separate LiteLLM flaw made the urgency immediate. CVE-2026-42271, a command-injection bug in the MCP test endpoints, landed on the CISA KEV list on June 8 with a June 22 remediation deadline. That KEV entry is not the Obsidian chain. The two are distinct disclosures four days apart, fixed in different releases, pointed at the same gateway. LiteLLM carries more than 40,000 GitHub stars and sits in thousands of enterprise deployments. This is not the first scare, either. A supply-chain compromise backdoored LiteLLM versions 1.82.7 and 1.82.8 on PyPI in March. A compromised gateway exposes every provider credential the organization holds.

Langflow and Mini Shai-Hulud proved the pattern scales

The same boundary broke in two more tools in the same fortnight. Langflow CVE-2026-5027 became the third Langflow remote-code-execution flaw to hit active exploitation this year. A path traversal in file upload lets an attacker write files anywhere on disk, and because Langflow ships with auto-login enabled by default, a single unauthenticated request reaches RCE. VulnCheck confirmed exploitation on June 9. Censys counted roughly 7,000 exposed instances, the heaviest concentration in North America, with MuddyWater attribution.

Advertisement

The Mini Shai-Hulud campaign hit a different pressure point. After the worm’s source code went public on May 12, copycat variants compromised 32 Red Hat Cloud Services npm packages on June 1, packages pulled 80,000 times a week. The worm harvests more than 20 credential types and self-propagates under the compromised maintainer’s identity.

Four teams, four tools, one operating failure. The bug classes differ. SearchLeak is a prompt injection. LiteLLM is privilege escalation. Langflow is path traversal. Mini Shai-Hulud is supply-chain poisoning. The boundary that broke is the same in all four.

The market already repriced the risk

CrowdStrike’s Q1 FY27 earnings call put a number on the gap. AIDR, the company’s AI detection and response line, grew ending ARR more than 250% sequentially, with a Q2 pipeline above $50 million (SEC-filed 8-K). Total company ARR reached $5.51 billion, and CrowdStrike’s fleet telemetry shows more than 1,800 agentic applications running across enterprise endpoints.

On June 17, the company extended AIDR to AWS, adding real-time evaluation of agent, LLM, and MCP communications across Amazon Bedrock, Kiro, and Strands Agents, building on its work with Anthropic’s Project Glasswing. Daniel Bernard, CrowdStrike’s chief business officer, said the AI attack surface now spans development, runtime, identities, and cloud infrastructure, and that teams treating those as separate domains leave the gaps between them open.

Advertisement

Practitioners name the same gap in plainer terms

David Levin, CISO at American Express Global Business Travel, told VentureBeat the pattern does not surprise him. “We kind of have this shadow AI, which is just the new version of shadow IT,” Levin said.

Both Langflow and LiteLLM fit the description. Teams stood them up for convenience, gave them credentials, and never brought them under governance. Levin puts the fix before deployment. “We didn’t go into this with just saying we’re going to go do this without the right fundamentals,” he said. “We leverage NIST controls. NIST has released their CSF along with their AI framework. OWASP released their top 10. You need the right fundamentals before you deploy.”

Merritt Baer, CSO at Enkrypt AI and former AWS Deputy CISO, named the structural version of the failure in a separate VentureBeat interview. “Enterprises believe they’ve ‘approved’ AI vendors, but what they’ve actually approved is an interface, not the underlying system,” Baer said. “The real dependencies are one or two layers deeper, and those are the ones that fail under stress.” She has tied that directly to how systems fall. “Raw zero-days aren’t how most systems get compromised. Composability is,” Baer told VentureBeat. “It’s the glue between the model and your data where the risk lives. If you give an agent bash and a root token, you’ve already done most of the attacker’s work for them.” That is what rows 2 and 4 of the audit test: the gateway that holds every key, and the agent identity no one governs.

Levin had a sharper frame for the boardroom. “You need to talk more in terms of risk versus compliance to your boards and your executives,” he said. “It’s not about the size of the engineering team anymore. It’s the size of your imagination. It’s all written in plain English. It’s not hard for anyone.” Neither SearchLeak nor LiteLLM needed custom malware or a zero-day to work.

Advertisement

Adam Meyers, CrowdStrike’s SVP of Intelligence, put the operational squeeze in numbers in an exclusive VentureBeat interview. “The problem is not zero-day. The problem is patching. If you 10x that problem, they’re gonna be completely underwater,” Meyers said. He pointed to identity as the second front. “Some of these AI have their own identities, or people give their identity to the AI to take action on their behalf, and that makes it a very complex problem.”

The five-check trust-boundary audit

Each row maps a gap to its proof point, a verification command for Monday morning, the fix, and the sentence to read to the board.

Trust-Boundary Gap

Proof Point

Advertisement

What Broke

Verify Monday

Fix Monday

Board Language

Advertisement

1. Prompt-to-Data

SearchLeak CVE-2026-42824. P2P injection + HTML race + Bing SSRF. One-click mailbox exfiltration via microsoft.com URL. PoC demonstrated; Microsoft rated it critical, NVD not yet scored.

URL q-parameter passed to LLM as instructions. Sanitizer ran after render. Bing acted as exfiltration proxy via CSP allowlist.

Audit CSP allowlists for domains performing server-side fetches. Monitor Copilot Search URLs for encoded payloads. Review Copilot audit logs.

Advertisement

Confirm server-side patch applied. Enable sensitivity labels restricting Copilot. Treat AI streaming output as untrusted.

“Our AI assistant could search employee email and send results to an attacker through a trusted Microsoft URL. Vendor patched it. We must verify configuration.”

2. Gateway Credential Exposure

LiteLLM three-CVE chain (-47101, -47102, -40217). CVSS 9.9. Separate CVE-2026-42271 on CISA KEV (fixed in v1.83.7; full chain fixed in v1.83.14-stable). June 22 deadline.

Advertisement

No role validation on key endpoints. Self-promotion to admin via /user/update. exec() sandbox escape. One gateway exposes all provider keys.

Run pip show litellm. Below 1.83.14-stable = vulnerable. Check /mcp-rest/test/ exposure. Audit proxy_admin accounts.

Upgrade to v1.83.14-stable+. Rotate all provider API keys. Block /mcp-rest/test/* at proxy. Review Custom Code Guardrails.

“Our AI gateway held keys for every provider. A default account could promote itself to admin and steal them all. Rotating and patching now.”

Advertisement

3. AI Tooling Sprawl

Langflow CVE-2026-5027 (CVSS 8.8). Third RCE of 2026. ~7,000 exposed instances. MuddyWater. Active exploitation June 9.

Path traversal in file upload. Auto-login enabled by default. Single unauthenticated request to RCE.

Query Censys/Shodan for Langflow, Flowise, n8n, Dify on your perimeter. Check auto-login. Inventory AI tools outside change management.

Advertisement

Pull AI platforms behind VPN/zero-trust. Enable auth everywhere. Upgrade Langflow to v1.9.0+ (current release 1.10.0). Fingerprint surface continuously.

“AI dev tools are exposed to the internet with login disabled. A nation-state group is exploiting this flaw now. Pulling behind access controls today.”

4. Non-Human Identity Governance

AIDR ARR up 250% (Q1 FY27, SEC 8-K). Q2 pipeline >$50M. 1,800+ agentic apps across enterprise endpoints.

Advertisement

Agents hold identities and act on behalf of humans. Some exceed their intended scope to reach a goal. No standard governs agent credential lifecycle.

Inventory all non-human identities used by agents and MCP servers. Map agent-to-data-store access. Flag agents with write access to security policy.

Least-privilege every agent identity. Set privilege boundaries via identity protection. Runtime detection for policy-exceeding actions. Human-in-the-loop for policy changes.

“AI agents hold credentials and act autonomously. We do not govern their identity lifecycle like human access. The 250% market growth tells us this gap is systemic.”

Advertisement

5. Runtime Agentic Detection

Falcon AIDR expanded to AWS (June 17). Covers Bedrock, Kiro, Strands Agents. MCP integration. Real-time agent/LLM/MCP evaluation.

Traditional tools monitor human-speed actions. Agents run at machine speed, thousands of actions per minute, and route around controls to reach goals.

Test if EDR/XDR links agent actions to originating identity. Verify SIEM ingests MCP communications. Confirm you can distinguish human from agent on endpoint.

Advertisement

Deploy AIDR or equivalent runtime detection. Shadow-AI discovery for all agentic apps, models, MCP servers, identities. Real-time policy enforcement on agent actions.

“We cannot distinguish a human employee from an AI agent acting on their behalf. We need runtime detection at machine speed that can stop damage before it starts.”

The fix is plumbing, not policy

The June 2 executive order creates an AI Cybersecurity Clearinghouse with a July 2 deadline. The five gaps above are not frontier-model problems. They are plumbing problems in the gateways, orchestration platforms, identity layers, and runtime environments where AI meets the enterprise.

The audit is five rows. Every row maps to a June disclosure or market signal, a command a team can run before lunch, and a sentence a CISO can read to the board. The question is not whether your vendor will patch. It’s whether you find the gap first — or whether an attacker finds it the way they found Copilot and LiteLLM.

Advertisement

Source link

Continue Reading

Tech

There’s A Good Reason Why Android Stopped Using Dessert Names For New Versions

Published

on





If you’re a longtime Android user or just a very well-informed iOS user, you probably remember how Android versions used to be named after desserts. Android 1.5 Cupcake, released in April 2009, was the operating system’s first public release to use a confectionery naming scheme. Since then, we’ve seen more than a dozen releases, each bearing the name of a popular sweet treat in alphabetical order — well, popular at least in some parts of the world.

This was one of the major reasons why Google pivoted away from attaching dessert names to Android releases in 2019. Sameer Samat, vice president of product management for Android, explained in a blog post how this naming scheme posed challenges for a global audience. In many parts of the world where treats like jelly beans or gingerbread aren’t particularly popular, it didn’t make much sense to market and label an entire version of Android around them. 

This is likely why the final few Android versions preceding Android 10 were named after desserts with broader international recognition — KitKat, Lollipop, Marshmallow, Nougat, Oreo, and Pie. Plus, for languages where certain letters or sounds aren’t easily distinguishable (like Japanese with “L” and “R”), Google noted how the alphabetical naming convention can be confusing. Instead, it opted for a far simpler naming system based on numbers. It’s now easier to tell which version of Android your phone is running and whether it’s the newest one available.

Advertisement

How is Android’s new brand identity holding up?

There was understandable criticism pouring in from Android enthusiasts when Google decided to drop its naming convention with Android 10. While it’s sad knowing that the average Android user will never be blessed with an Easter egg related to a sweet treat again, for those nerdy enough, Android has continued to use confectionery-based codenames internally. Android 10 was known as Quince Tart, Android 11 as Red Velvet Cake, Android 12 as Snow Cone, and so on. The latest version of the operating system, Android 17, is internally known as Cinnamon Bun.

Fortunately, Android hasn’t lost its fun nature. While not every major release is a visual overhaul, we have seen plenty of playful touches over the years. Google’s Material You design system is all about how the user interface uses dynamic colors for a more personal feel. Material 3 Expressive took this a step further by adding a refined motion-physics system and improved typography. It also helps that nearly every Android OEM brings its own flavor to Android. The bottom line is we don’t think Android has lost its creative or unique edge simply because Google stopped erecting statues of popular desserts in Mountain View, California.

Advertisement

Android may be moving away from desserts, but recent versions seem to have found a different niche — space exploration. Like the Easter egg in Android 14, newer versions have featured an interactive space-themed mini-game you can try.



Advertisement

Source link

Continue Reading

Tech

Vercel debuts eve open source agent framework, tries to fix shadow AI with Passport

Published

on

DEvops

Cost premium of using AWS indirectly via Vercel is mitigated by more efficient use of compute resources, CTO claims

Vercel introduced an open source agent framework called eve at its Ship event in London this week, along with other new features including Passport, an attempt to put employee apps created with AI under enterprise control.

Agents are dominating the AI conversation currently, and in particular custom agents. Agent frameworks that simplify coding already exist, though eve has a few notable characteristics.

Advertisement

The coding languages are TypeScript and Markdown, and an agent is a directory with files that define the instructions and skills, the model provider, the tools, the authentication, the channels, and the schedule. Agents are sandboxed on isolated VMs by default. The framework also includes a simple testing tool that exercises the agent and evaluates the result. Code is on GitHub under the Apache 2.0 license.

There are plenty of existing agent frameworks, but Vercel CTO Malte Ubl told us that with eve, simplicity is a feature, with users able to take a “fill in the blanks” approach.

“The life cycle of the agent is completely orchestrated by the framework, and as a developer or builder you have to put things in the right places, but then everything magically works,” Ubl said.

“It’s a system where you don’t have to understand every little bit about what sandboxes are and how to compact context windows… All these things are quite complex; you don’t have to understand any of it.”

Advertisement

Agents built with eve deploy to Vercel by default, using the same command that works for web applications: vercel deploy. That said, the company says it is not tied to its platform.

“We are 100 percent committed to making it work everywhere,” Ubl told us, though an early user has already raised an issue about it requiring a Vercel login even when set to use a different model provider; it is early days and this may be a bug. Providers for LLMs and sandboxes are configurable. An eve project also runs locally with: npx eve dev.

Vercel's eve agent framework

Vercel’s eve agent framework

What LLM does eve use? “You can connect any model that AI SDK connects to, which is all the models,” Ubl said, where the AI SDK is a Vercel SDK. There is also an option to use Vercel’s AI Gateway, which has a single endpoint for multiple model providers and can improve reliability by switching to another model if one fails.

The company also previewed Enterprise Apps and Agents, which have four components. Vercel Connect replaces static secret credentials with short-lived tokens accessed by OAuth or an API. Vercel Passport uses OpenID Connect to put all the applications and AI agents in a team behind an identity provider such as Okta or Microsoft Entra. Enterprise Managed Users uses directory sync to enable Vercel in a team to be managed by the organization’s identity system. Finally, Bring Your Own Cloud (BYOC) lets organizations use Vercel’s platform running on AWS infrastructure provisioned by the customer.

Advertisement

According to Vercel, Passport was a highly requested feature because of the number of employees who create applications hosted by Vercel but outside the control of the organization. A typical scenario is that an employee builds an application with AI assistance, and the AI agent defaults to using the Next.js React-based framework and Vercel hosting. It is a variety of shadow IT – or shadow AI – where staff create vibe-coded applications using company data but outside the organization’s IT policy or control.

Vercel itself is an AWS customer so its platform should work well using BYOC, but there are some trade-offs, Ubl said. One is that “we don’t allow your compute to assume AWS roles… If you are really deep in the AWS IM [Identity Management] security system, then Vercel doesn’t give this to you,” he told us, “but we do always issue an OIDC token for every invocation of the compute, so you can use that to configure your AWS policies.” Second, with BYOC, “we become a management vendor,” Ubl said, which means giving Vercel access to that part of the customer’s AWS infrastructure.

All Vercel deployments are immutable, which means “every time you push to Git you get a new infrastructure from scratch,” Ubl told us. He considers this ideal for AI agents. Other aspects of the platform have also been optimized for agents. “We try to be close to what the agents do,” he said.

A common critique of Vercel is that since it runs on AWS, using Vercel means paying a premium for hosting that would be cheaper when purchased directly. According to Ubl, that premium is mitigated by Vercel’s efficient use of those resources, “especially at low scale, and especially compared to Lambda,” the AWS serverless platform. Vercel said last year that it cut its Lambda costs by up to 95 percent by reusing idle instances.

Advertisement

Ubl claimed AWS customers need “more than 35 percent utilization to match Vercel’s price.”

Another Vercel competitor is Cloudflare, which, unlike Vercel, hosts on its own datacenters and has an efficient serverless platform using Workers, based on V8 isolates, a feature of the V8 JavaScript engine used by Google Chrome and the open source Chromium project.

Ubl said that whereas Cloudflare Workers are unique to Cloudflare, Vercel “is a more normal platform, we don’t run some bespoke runtime that we create ourselves, we just run Node.js or Python or PHP and it runs on a VM (virtual machine)… We offer standard PostgreSQL, VPC peering, AWS, S3 and not bespoke.”

This is a bit of a war of words. Cloudflare engineering director Steve Faulkner in February described the Next.js tooling, sponsored by Vercel, as “entirely bespoke.” Since then the situation has improved, with an Adapter API that is stable in Next.js 16.2, meaning other providers no longer need to reverse-engineer the build output, but adapters for AWS and Cloudflare are still under development, with completion expected by the end of 2026. ®

Advertisement

Source link

Continue Reading

Tech

Early Prime Day 2026 Apple Deals Start Now From Just $14.99

Published

on

Prime Day 2026 kicks off on Tuesday, but there are numerous Apple deals in effect now that deliver the lowest prices of the season.

There are several early Prime Day Apple deals worth checking out this weekend, as the sale festivities kick off. From AirPods 4 for $99 to triple-digit discounts on M5 MacBook Air models, Apple products are a popular pick for Prime Day.

Shop Prime Day deals

AirPods drop to $99

Hand holding AirPods Pro 3 wireless earbuds charging case on a gray surface, with a small green light glowing on the front of the case.

AirPods Pro 3 are down to the lowest price ever.

Advertisement

AirPods prices have dipped to as low as $99 heading into Prime Week, with earbud and over-ear models on sale. Walmart has also replenished AirPods Pro 3 inventory at $169.

Today’s top AirPods deals

iPads on sale from $299

iPad Air M4 on a table displaying a large green topiary tree and a modern room with brick wall, shelves, and soft colorful lighting in the background.

Early Prime Day deals on iPads deliver prices from $299.

Those in search of a budget-friendly tablet can grab Apple’s 11-inch iPad with an A16 chip for $299. The current M4 iPad Air and M5 iPad Pro are also on sale, with a detailed rundown of the discounts in our iPad Price Guide.

Buy iPad 11 for $299

Advertisement

Today’s best iPad offers

Apple Watches up to $200 off

Close-up of the back of an Apple Watch Series 1 with circular sensors and text around the edge, attached to a perforated light-colored sports band held by a hand

Apple Watch Series 11 prices have dipped to as low as $299.

Current Apple Watch Series 11, SE 3, and Ultra 3 models are marked down by as much as $200, delivering some of the lowest prices of the year.

Buy Apple Watch Series 11 for $299

42mm Apple Watch Series 11 deals

  • 42mm Apple Watch Series 11 GPS (Aluminum Case, Sport Band): $299 ($100 off)
  • 42mm Apple Watch Series 11 GPS + Cellular (Aluminum Case, Sport Band): $399 ($100 off)
  • 42mm Apple Watch Series 11 GPS + Cellular (Titanium Case, Sport Band): $589 ($110 off)
  • 42mm Apple Watch Series 11 GPS + Cellular (Titanium Case, Milanese Loop Band): $639 ($160 off)

46mm Apple Watch Series 11 discounts

  • 46mm Apple Watch Series 11 GPS (Aluminum Case, Sport Band): $329 ($100 off)
  • 46mm Apple Watch Series 11 GPS + Cellular (Aluminum Case, Sport Band): $399 ($130 off)
  • 46mm Apple Watch Series 11 GPS + Cellular (Titanium Case, Sport Band): $549.97 ($200 off)

Apple Watch SE 3 & Ultra 3 markdowns

MacBooks as low as $589

Close-up of a silver laptop keyboard with black keys, showing the right side including arrow keys, shift, delete, and part of the screen bezel against a white background

Apple’s latest MacBooks are marked down to as low as $589.

Advertisement

Early Prime Day deals are plentiful on Mac computers as well, with Apple’s budget-friendly MacBook Neo dipping to $589.99. M5 MacBook Air models are also as low as $949.99, while M5 MacBook Pros with at least 1TB of storage can be picked up for as low as $1,529.99.

Compare prices across dozens of configurations in our Mac Price Guide.

Latest MacBook Neo savings

Early Prime Day MacBook Air deals

Top MacBook Pro discounts

  • 14″ MacBook Pro M5 (10C CPU, 10C GPU, 16GB, 1TB, Standard Display): $1,529 ($170 off) with in-cart coupon at B&H
  • 14″ MacBook Pro M5 (10C CPU, 10C GPU, 24GB, 1TB, Standard Display): $1,749 ($150 off)
  • 14″ MacBook Pro M5 Pro (15C CPU, 16C GPU, 24GB, 2TB, Standard Display, Space Black): $2,399 ($230 off) with in-cart coupon at Amazon

Best 16-inch MacBook Pro sales

  • 16″ MacBook Pro M5 Pro (18C CPU, 20C GPU, 48GB, 1TB, Standard Display, Space Black): $2,879 ($220 off) at B&H
  • 16″ MacBook Pro M5 Max (18C CPU, 40C GPU, 64GB, 2TB, Standard Display): $4,299 ($300 off) at B&H
  • 16″ MacBook Pro M5 Max (18C CPU, 40C GPU, 128GB, 2TB, Standard Display, Space Black): $5,099 ($300 off) at B&H

Chargers, cables, and more for your Apple devices

White Apple MagSafe battery pack resting on the back of a black smartphone with triple camera lenses, placed on a dark surface.

Apple iPhone accessories are up to 40% off.

iPhone accessories

Advertisement

Source link

Continue Reading

Trending

Copyright © 2025