Connect with us

Technology

Okta vulnerability allowed accounts with long usernames to log in without a password

Published

on

Okta vulnerability allowed accounts with long usernames to log in without a password

In a new security advisory, Okta has revealed that its system had a vulnerability that allowed people to log into an account without having to provide the correct password. Okta bypassed password authentication if the account had a username that had 52 or more characters. Further, its system had to detect a “stored cache key” of a previous successful authentication, which means the account’s owner had to have previous history of logging in using that browser. It also didn’t affect organizations that require multi-factor authentication, according to the notice the company sent to its users.

Still, a 52-character username is easier to guess than a random password — it could be as simple as a person’s email address that has their full name along with their organization’s website domain. The company has admitted that the vulnerability was introduced as part of a standard update that went out on July 23, 2024 and that it only discovered (and fixed) the issue on October 30. It’s now advising customers who meet all of the vulnerability’s conditions to check their access log over the past few months.

Okta provides software that makes it easy for companies to add authentication services to their application. For organizations with multiple apps, it gives users access to a single, unified log-in so they don’t have to verify their identities for each application. The company didn’t say whether it’s aware of anybody who’s been affected by this specific issue, but it promised to “communicate more rapidly with customers” in the past after the threat group Lapsus$ accessed a couple of users’ accounts.

Source link

Advertisement
Continue Reading
Advertisement
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Technology

Patronus AI launches world’s first self-serve API to stop AI hallucinations

Published

on

Patronus AI launches world’s first self-serve API to stop AI hallucinations

Join our daily and weekly newsletters for the latest updates and exclusive content on industry-leading AI coverage. Learn More


A customer service chatbot confidently describes a product that doesn’t exist. A financial AI invents market data. A healthcare bot provides dangerous medical advice. These AI hallucinations, once dismissed as amusing quirks, have become million-dollar problems for companies rushing to deploy artificial intelligence.

Today, Patronus AI, a San Francisco startup that recently secured $17 million in Series A funding, launched what it calls the first self-serve platform to detect and prevent AI failures in real-time. Think of it as a sophisticated spell-checker for AI systems, catching errors before they reach users.

Inside the AI safety net: How it works

“Many companies are grappling with AI failures in production, facing issues like hallucinations, security vulnerabilities, and unpredictable behavior,” said Anand Kannappan, Patronus AI’s CEO, in an interview with VentureBeat. The stakes are high: Recent research by the company found that leading AI models like GPT-4 reproduce copyrighted content 44% of the time when prompted, while even advanced models generate unsafe responses in over 20% of basic safety tests.

Advertisement

The timing couldn’t be more critical. As companies rush to implement generative AI capabilities — from customer service chatbots to content generation systems — they’re discovering that existing safety measures fall short. Current evaluation tools like Meta’s LlamaGuard perform below 50% accuracy, making them little better than a coin flip.

Patronus AI’s solution introduces several innovations that could reshape how businesses deploy AI. Perhaps most significant is its “judge evaluators” feature, which allows companies to create custom rules in plain English.

“You can customize evaluation to exactly [meet] your product needs,” Varun Joshi, Patronus AI’s product lead, told VentureBeat. “We let customers write out in English what they want to evaluate and check for.” A financial services company might specify rules about regulatory compliance, while a healthcare provider could focus on patient privacy and medical accuracy.

From detection to prevention: The technical breakthrough

The system’s cornerstone is Lynx, a breakthrough hallucination detection model that outperforms GPT-4 by 8.3% in detecting medical inaccuracies. The platform operates at two speeds: a quick-response version for real-time monitoring and a more thorough version for deeper analysis. “The small versions can be used for real-time guardrails, and the large ones might be more appropriate for offline analysis,” Joshi told VentureBeat.

Advertisement

Beyond traditional error checking, the company has developed specialized tools like CopyrightCatcher, which detects when AI systems reproduce protected content, and FinanceBench, the industry’s first benchmark for evaluating AI performance on financial questions. These tools work in concert with Lynx to provide comprehensive coverage against AI failures.

Beyond simple guard rails: Reshaping AI safety

The company has adopted a pay-as-you-go pricing model, starting at $10 per 1000 API calls for smaller evaluators and $20 per 1000 API calls for larger ones. This pricing structure could dramatically increase access to AI safety tools, making them available to startups and smaller businesses that previously couldn’t afford sophisticated AI monitoring.

Early adoption suggests major enterprises see AI safety as a critical investment, not just a nice-to-have feature. The company has already attracted clients including HP, AngelList, and Pearson, along with partnerships with tech giants like Nvidia, MongoDB, and IBM.

What sets Patronus AI apart is its focus on improvement rather than just detection. “We can actually highlight the span of the specific piece of text where the hallucination is,” Kannappan explained. This precision allows engineers to quickly identify and fix problems, rather than just knowing something went wrong.

Advertisement

The race against AI hallucinations

The launch comes at a pivotal moment in AI development. As large language models like GPT-4 and Claude become more powerful and widely used, the risks of AI failures grow correspondingly larger. A hallucinating AI system could expose companies to legal liability, damage customer trust, or worse.

Recent regulatory moves, including President Biden’s AI executive order and the EU’s AI Act, suggest that companies will soon face legal requirements to ensure their AI systems are safe and reliable. Tools like Patronus AI’s platform could become essential for compliance.

“Good evaluation is not just protecting against a bad outcome — it’s deeply about improving your models and improving your products,” Joshi emphasizes. This philosophy reflects a maturing approach to AI safety, moving from simple guard rails to continuous improvement.

The real test for Patronus AI isn’t just catching mistakes — it will be keeping pace with AI’s breakneck evolution. As language models grow more sophisticated, their hallucinations may become harder to spot, like finding increasingly convincing forgeries.

Advertisement

The stakes couldn’t be higher. Every time an AI system invents facts, recommends dangerous treatments, or generates copyrighted content, it erodes the trust these tools need to transform business. Without reliable guardrails, the AI revolution risks stumbling before it truly begins.

In the end, it’s a simple truth: If artificial intelligence can’t stop making things up, it may be humans who end up paying the price.


Source link
Continue Reading

Science & Environment

Politicians not ambitious enough to save nature, say scientists

Published

on

Politicians not ambitious enough to save nature, say scientists


Getty Images A delegate at the UN biodiversity summit, COP 16Getty Images

UN biodiversity summits happen every two years – this year in Cali, Colombia

Scientists say there has been an alarming lack of progress in saving nature as the UN biodiversity summit, COP 16, draws to a close.

The scale of political ambition has not risen to the challenge of reducing the destruction of nature that costs the economy billions, said one leading expert.

Representatives of 196 countries have been meeting in Cali, Colombia, to agree on how to halt nature decline by 2030.

The biodiversity summit is separate from the more well-known COP climate summit, which is set to take place in Baku later this month.

Advertisement

Countries were meant to come to the table with a detailed plan on how they intended to meet biodiversity targets at home, but most missed the deadline.

Getty Images Frog on a small leaf in the AmazonGetty Images

Megadiverse countries such as Brazil hold much of the world’s remaining biodiversity

However, plans were agreed to raise money for conservation through making companies pay for using genetic resources from nature.

The summit comes as one million species face extinction and nature is declining at rates unprecedented in human history.

We are stuck in a “vicious cycle where economic woes reduce political focus on the environment” while the destruction of nature costs the economy billions, said Tom Oliver, professor of biodiversity at the University of Reading.

Advertisement

Getty Images Loss of fir trees to disease in a national park in EuropeGetty Images

Tree extinctions are increasing due to habitat loss and pests and diseases

“Until we have world leaders with the wisdom and courage to put nature as a top political priority then nature-related risks will continue to escalate,” he told BBC News.

The UN biodiversity summit, COP 16, was the first chance to take stock of progress towards a landmark deal to restore nature agreed in 2022.

However, scientists lamented the pace of progress. Nathalie Seddon, professor of biodiversity at the University of Oxford, said while some meaningful progress was made, the overarching picture was “undoubtedly deeply concerning”.

“Biodiversity still takes a back seat to climate action – even though the science speaks strongly to the need for fully coordinated approaches,” she said.

Advertisement

What was agreed at the summit?

  • An agreement was reached that companies profiting from nature’s genetic data should pay towards its protection through a global fund
  • The fund, to be known as the Cali fund after the COP16 host city, will be financed with payments from companies who make use of genetic information from living things
  • The role of Indigenous Peoples as vital stewards of nature was officially recognised through the setting up of a permanent body to represent their interests

The next biodiversity summit will take place in 2026, with time running out for solutions. Astrid Schomaker, executive secretary of the UN Convention on Biological Diversity, said through such gatherings governments, NGOs and scientists could share knowledge and resources.

“This collective spirit is critical as we work to develop and implement effective policies to confront the complex and interconnected crises facing our planet’s ecosystems,” she said.

Commenting on the talks, the renowned scientist, Dr Jane Goodall, said our future is “ultimately doomed” if we don’t address biodiversity loss.

She told BBC News: “We have to take action too. We can’t only blame the government and big corporations, although a huge part of the blame lies on them.”

Advertisement

Additional reporting by Victoria Gill.



Source link

Continue Reading

Technology

Can you build a startup without sacrificing your mental health? Bonobos founder Andy Dunn thinks so

Published

on

Can you build a startup without sacrificing your mental health? Bonobos founder Andy Dunn thinks so

Bonobos founder Andy Dunn is back in the builder’s seat, working on an in-person social media platform called Pie. But the biggest lessons he learned from his $310 million Bonobos exit don’t have as much to do with entrepreneurship as they do with staying sane.

When Dunn was in college, he was diagnosed with bipolar disorder, but he didn’t get adequate treatment until 2016, when he was hospitalized during a manic episode for the second time.

“The manic state is just a disaster — that’s like being in psychosis, you know, messianic delusions. … You can’t accomplish anything in that state,” Dunn said onstage at TechCrunch Disrupt 2024. The incident was enough of a wakeup call that 16 years after his initial diagnosis, he finally took his condition seriously and started going to therapy, taking medication, and monitoring his sleep.

Dunn wrote a book called “Burn Rate: Launching a Startup and Losing My Mind,” documenting the parallel processes of building Bonobos and figuring out how to accept and then manage his bipolar disorder. But the lessons from the book are applicable for entrepreneurs beyond those with Dunn’s diagnosis.

Advertisement

“We all have mental health, right? It doesn’t take a diagnosis to suffer or struggle,” he said.

Still, entrepreneurs tend to report a higher incidence of mental health issues throughout their lives than the average person.

“There’s definitely a correlation between neurodivergence and creativity,” he said. “I don’t know if entrepreneurship attracts people who are neurodivergent, or it makes them more neurodivergent, but there’s certainly some kind of a virtuous and sometimes unvirtuous cycle there.”

That interplay between mental illness and entrepreneurship is even more palpable for Dunn, who says that the state of hypomania — the high of bipolar disorder, as opposed to the crushing depressive periods — could be conducive to running a startup.

Advertisement

“Here are the DSM criteria for [hypomania]: rapid speech, increased ideation, grandiosity, decreased need for sleep, ability to be more creative … more or less the central casting traits of an entrepreneur having a good day,” he said. “I was able to benefit from that, but the price that I paid was ultimately too high. I was depressed with suicidal ideation for between two to three months a year, and then ultimately, the full mania and psychosis came raging back, which was catastrophic.”

But even in an astonishingly productive hypomanic state, Dunn doesn’t think he was the greatest boss or colleague. He said that one of the side effects of hypomania is becoming irritable when people disagree with you, which is essential to running a collaborative company. Now, running Pie, Dunn welcomes this debate.

“When we disagree, let’s go, let’s disagree even more, because we’re going to be able to make a better decision coming out of it,” he said.

While discussions about mental health have become more mainstream, founders still worry about the stigma of revealing a diagnosis to colleagues and investors. Dunn is an adviser to the Founder Mental Health Pledge, which asks investors to advocate for the mental health of the founders they invest in. But he’s not naive that the stigma is still present — when founders ask for his advice about when to disclose a mental health concern to investors, he says to wait six weeks until after the deal closes.

Advertisement

“We raised $125 million at Bonobos — would you give $125 million to someone who can either be psychotic or catatonically depressed?” Dunn said. “But also, you shouldn’t do what I did and hide it, because then, you know, when there is a crisis, it’s a surprise.”

Dunn’s discussion of his experience with bipolar disorder doesn’t seem to have hurt his ability to fundraise, though — Pie just raised a $11.5 million Series A. As public as he is about the severity of bipolar disorder, he’s also open about how his regimen of therapy and medication have helped him live a stable life.

“I treat bipolar as my Olympic regimen. For Simone Biles, it’s how to navigate and win the gold,” he said. “For me, the gold medal is to die of something else, right? Because the horrible thing about bipolar is the suicide rate.”

Now, the next test for Dunn is to do the work it takes to make Pie a success without sacrificing his stability.

Advertisement

“Here’s the challenge,” Dunn said. “We want to have good mental health, and we want our teams to have balance in mental health, and yet a 40-hour workweek doesn’t cut it. You can’t change the world with a bunch of people working 40 hours a week.”

One way Dunn has navigated this fine line is to be open with job candidates about what the work will entail, as well as how he will support them with company benefits.

“I have a new spiel I give when recruiting, which is, this is a 50- to 60-hour-per-week job, and in return, you’re going to get two awesome things. One, you’re going to learn more and grow more and develop more. Two, you’ve got equity,” he said.

Like any startup leader, Dunn wants his team to work hard, but he believes there’s a way to do that without it backfiring. In describing his time at Bonobos in “Burn Rate,” Dunn writes, “I came to a classic mistaken conclusion of an immature startup founder: if the business isn’t working, then we must not be working hard enough.”

Advertisement

There’s no denying that founders need to work hard — but taking care of oneself is part of that hard work.

Source link

Continue Reading

Technology

Invincible Fight Girl wants to keep the dream of serialized animation alive

Published

on

Invincible Fight Girl wants to keep the dream of serialized animation alive

Juston Gordon-Montgomery grew up during the Attitude Era of pro wrestling — a time when the personalities were humongous, the storylines were wild, and the theater of it all bordered on high camp. Though it has gotten way easier to watch wrestling in the streaming era, the sport’s cultural dominance has waned in the years since it first captured Gordon-Montgomery’s imagination. Especially to non-fans, the idea of getting into wrestling can still feel a bit daunting. But that feeling is part of what inspired Gordon-Montgomery to create Invincible Fight Girl, a new series coming to Adult Swim.

Invincible Fight Girl’s story about a young accountant named Andy (Sydney Mikayla) who dreams of becoming a legendary wrestler is the stuff of shonen classics like Dragon Ball Z and One Piece. But the show’s setting — a world where everyone is some sort of masked brawler with unique costumes and signature combat moves — feels like a loving send-up of the pro-wrestling culture that defined the sport throughout the late ’90s. On paper, Invincible Fight Girl’s blend of influences makes its premise sound a little busy, but you can immediately see the vision come together as soon as its characters step into the ring.

When I recently sat down with Gordon-Montgomery to talk about Invincible Fight Girl, he told me that he wanted his love for the Attitude Era of wrestling to shine through “not just in Andy as a character, but the show as a whole.” 

“Wrestling felt magical to me as a kid, but the characters and their backstories also felt real,” Gordon-Montgomery explained. “I fully believed that the Undertaker really was a dead guy. The Attitude Era felt like it lent itself to the question ‘What would a world be like if it was filled with pro wrestlers,’ because they would all be these very distinct, very clear characters with ideologies that would come through in how they speak and fight.”

Advertisement

From the jump, Gordon-Montgomery knew he wanted to tell a story that both focused on someone chasing their passion and captured the feeling of getting swept up in the thrill of a wrestling match. Naturally, Invincible Fight Girl’s creative team took some cues from real-world wrestling. Because the show is all about a scrappy fighter training to be the best in a world full of magical people, though, anime series like Pokémon and Naruto were an obvious go-to source of inspiration.

If those shows could spin entire worlds out of concepts like catching monsters and being a shinobi, Gordon-Montgomery felt he might be able to do something similar with pro wrestling. To really capture the spirit of wrestling, though, Gordon-Montgomery and his team found themselves looking to “one of the most fantastic pieces of media there is”: director Satoshi Nishimura’s 2000 adaptation of Hajime no Ippo.

“I don’t know if a lot of people know about Hajime no Ippo, but it was the north star for us because, in that show, the fighting isn’t just fighting,” Gordon-Montgomery explained. “It’s a way to visualize philosophies clashing and illustrate how characters grow and change. So much of wrestling matches is just storytelling and pageantry, and it felt important to make sure that our fights weren’t just people hitting each other and pulling off moves that you recognize.”

Quesa Poblana giving Andy a hard time.
Image: Adult Swim

Advertisement

Early in the series, as Andy’s first striking out on her own, many of her go-to maneuvers are wrestling basics you might recognize from live-action matches because she’s a novice who learned everything she knows from instructional videos. Her skills level up as she meets new allies like elderly wrestling legend Quesa Poblana (Rolonda Watts) and aspiring journalist Mikey (T.K. Weaver). But Andy’s transformation into Invincible Fight Girl takes time, something many networks seem increasingly skittish about giving newer projects.

When Gordon-Montgomery started in animation, he didn’t see Western studios producing a lot of serialized shows in the way he wanted Invincible Fight Girl to be. Protracted narratives that play out over the course of dozens of episodes are a hallmark of the anime Gordon-Montgomery was taking notes from, but he knew that pushing for that kind of story structure would be a challenge.

“Especially because we’re in this era of shorter season orders, there was definitely some concern about, ‘How long are you trying to draw these plot beats and revelations out?’” Gordon-Montgomery told me. “But to the credit of our partners at the network, I think they understood our vision. We were able to really convey that this is how Andy’s story needed to be told in order for audiences to really experience it the way we intended.”

Though Gordon-Montgomery doesn’t want to put a number to how many episodes he envisions Invincible Fight Girl running for just yet, he’s confident that the show’s core concept has legs akin to Pokémon’s.

Advertisement

Pokémon is kind of at a point where it’s just going to keep going forever, which isn’t quite what we want to do,” Gordon-Montgomery said. “But I think there’s a very, very long runway of different ideas that we’re exploring philosophically with Andy and this world we’ve created. There are a lot of things that haven’t been done in animation here that I see us doing if we get the shot.”

Invincible Fight Girl premieres on Adult Swim on November 2nd.

Source link

Continue Reading

Technology

Too good to be true? Job scams on the rise as finance, IT, and healthcare sectors become prime targets

Published

on

A white woman with long brown hair in a ponytail looks down at her computer in a distressed manner. She is holding her forehead with one hand and a credit card with the other

A new report from Heimdal has revealed jobseekers across the world are being targeted by scams exploiting individuals looking for work in sectors such as finance, IT, and healthcare.

Based on an analysis of over 2,670 social media posts and comments from victims in 2023 and 2024, the report highlights the common tactics used by scammers, the industries most affected, and the emotional toll these scams take on their victims.

Source link

Continue Reading

Technology

One more year of the iMac Pro being missing in action

Published

on

One more year of the iMac Pro being missing in action

This week, Apple announced a new M4 iMac. It got some upgrades that help make it more appealing to creatives and pros, such as the more powerful M4 chip, Thunderbolt 4, upgraded camera, and nano-texture display.

But an iMac Pro, this is not.

A more larger and more powerful iMac has been missing in the lineup since before the transition to Apple Silicon. Despite Apple’s insistence that it completed the transition to Apple Silicon in 2022, a 27-inch iMac is still missing. Is there any hope?

Has it been replaced?

Apple Mac Studio top down view showing PC and keyboard.
Mark Coppock / Digital Trends

Yet conspicuous by its absence was any kind of larger iMac equipped with an M4 chip. Close to four years after the iMac Pro was discontinued, we’re still left wondering what — if anything — Apple plans for its plus-sized all-in-one computer.

And because of that, I can’t help feeling that there’s a noticeable gap in Apple’s desktop Mac lineup, whether we’re talking about a beefy iMac Pro or simply a larger iMac with the same colorful design as Apple’s base model. But will Apple actually do anything about this situation?

Advertisement

For its part, Apple has said that it thinks the combination of the Mac Studio and the Studio Display is a great combination for professional users. And on that point, it might be right: together, the Mac Studio and Studio Display start at $3,598, which is much cheaper than the iMac Pro’s old starting price of $4,999. Sure, the outcome is not quite as sleek, but it does a great job for almost $1,500 less. Who can argue with that?

In that regard, I’m inclined to agree that a true iMac Pro probably doesn’t need to be brought back, and that Apple was right to keep it out of the recent Mac announcements. It feels like more of a “nice to have” than an absolute essential, and I doubt that’s enough justification for Apple.

But what about the larger desktop iMac with an M4 Pro? Apple used to sell the iMac in both 21.5-inch and 27-inch sizes, yet now your only choice is the 24-inch iMac. For people who want a larger all-in-one computer without needing the beefier components (or hefty price tag) of the Mac Studio and Studio Display, there are few options from Apple.

Missing in action

Apple's John Ternus discusses the iMac at the Worldwide Developers Conference (WWDC) in 2017.
Apple

Over the past few months, the idea that Apple was planning to release a bigger iMac in the fall simply hasn’t been on the agenda. In fact, there have been precious few rumors surrounding this mooted device at all in the last year or so. To me, that implies either that a larger iMac is a long way off, or that it’s not happening at all.

Even the upgrades seen by the actually existing iMac are minor at the moment. Sure, this year we’ve had a few new colors, a Thunderbolt 4 upgrade and, yes, the M4 chip, but it’s not exactly a radical overhaul of the iMac. Does this computer simply not sell well enough for Apple to devote significant resources to it? If so, that could explain why we’re not seeing a larger model — perhaps Apple just doesn’t think an upgrade like that is worth anyone’s time.

Advertisement

If so, that’s a sad state of affairs for such an iconic computer, but such is the world of technology. Things move on at such a rapid pace that it’s inevitable that some once-popular devices will get left behind.

The other possibility is that Apple is merely biding its time until it feels the larger iMac is ready before releasing it. The iMac doesn’t sell in huge numbers like iPhones and MacBooks, so it’s less important for Apple to get new updates out of the door every single year. We’ve already heard that Apple is still “exploring” the idea of a larger iMac, with Bloomberg journalist Mark Gurman previously stating that Apple is still working on the product. When the timeframes are longer, Apple can afford to move at a slower pace.

I can’t tell you for sure whether Apple is ever going to bring back an iMac with a bigger screen, or what form that will take if it does happen. But what is certain is that we’ve got at least another year ahead of us before we see the next iMac upgrade. Let’s hope that one comes with some better news for fans of larger displays.






Source link

Advertisement

Continue Reading

Trending

Copyright © 2024 WordupNews.com