Showcasing New Products 

At Apple’s WWDC24 from June 10 to June 14, Apple showcased a variety of updates and advancements across its software platforms, including iOS, iPadOS, macOS, watchOS, tvOS, and visionOS. Key announcements included significant updates for iOS 18 and macOS 15, as well as new AI integrations and improvements to built-in apps like Photos and Apple Music. Crucially, the conference also highlighted Apple’s commitment to AI technologies and its plans to integrate generative AI capabilities into its devices.  

Let’s take a look at the key product and other announcements from WWDC24: 

iOS 18 

iOS 18, Apple’s latest iOS for iPhones introduces several significant updates, including a more customisable home screen, a redesigned Photos app with AI-powered editing tools, RCS support in Messages for improved cross-platform communication, and enhancements to the Mail, Calendar, and Maps apps. All these improvements are around making the iPhone more intuitive and powerful for users. Also, the Control Centre has now been revamped to feature a multipage layout with third-party widgets. 

One other fun new feature for iOS 18 around user-personalisation will be the ability for iPhone users to make their conversations more enjoyable by creating AI images of people they’re messaging with in a way that’s similar to an AI-upgraded Bitmoji. 

iPhones To Use Satellites 

There was also the announcement at WWDC 24 that with iOS 18, iPhone users will be able to send messages via satellite. This feature, available on iPhone 14 models and later, expands upon the existing Emergency SOS via satellite capability. It allows users to send and receive iMessages and SMS texts, including emoji and Tapbacks, even when they are out of range of cellular and Wi-Fi networks. 

macOS Sequoia 

Apple’s macOS Sequoia, the latest version of its OS for Macs has been given a range of new features including a new Passwords app, redesigned Reader view in Safari with machine learning integration, upgrades to Messages and Notes, and improved window management. The update also includes enhancements to Continuity, such as iPhone Mirroring. With iPhone Mirroring, (through macOS’ Continuity feature), users can mirror their iPhone’s screen and control it from their Mac laptop or desktop.   

All this should mean enhanced user productivity and convenience (better password management), a smarter browsing experience, more efficient multitasking, and improved messaging and note-taking capabilities 

iPadOS 18 

iPadOS 18 brings updates to the Notes app, including support for Math Notes and a new Calculator app that supports Apple Pencil. It also introduces a floating tab bar for better navigation and similar home screen customisation options to iOS 18. 

watchOS 11 

watchOS 11, the latest version of Apple’s operating system for Apple Watch, adds a redesigned Photos face, a new Translate app, and enhancements to the Fitness app, including a Training Load feature and a customisable Summary mode. It also introduces the Vitals app for health monitoring. The hope is that these new features will provide users with a more personalised and comprehensive fitness and health tracking experience, and a more intuitive and visually engaging interface. 

tvOS 18 

tvOS 18, the latest version of Apple’s OS for Apple TV includes AI-enhanced subtitles, Amazon X-Ray-style information while watching, and clearer dialogue options, improving the viewing experience on Apple TV 4K. 

‘InSight’ For Apple TV+ 

Those who use Apple TV+ may be pleased with the new InSight feature that displays actors’ names and song titles as they appear on the screen and is similar to Amazon’s X-Ray technology. Also, like Shazam, it highlights the song playing in the TV show or film and, as you may expect, then gives the user the option to add it to their Apple Music playlist. 

visionOS 2 

Apple’s OS for the Vision Pro headset, visionOS 2, has received upgrades to enhance the Vision Pro experience with new developer frameworks, an international launch schedule, and improved virtual display features. It also introduces new gestures and SharePlay support in the Photos app. For example, it will allow photos to be transformed into interactive experiences using AI. Notably, users will be able to turn existing images into spatial photos (including photos captured on older devices). 

New navigation gestures are also being introduced, and it supports higher resolution and larger virtual displays for connected Macs.  

Improvements also include new developer tools like volumetric APIs and TabletopKit for games, adds train support in travel mode, and expands content with new 180-degree 8K video formats through partnerships with content creators. 

New Markets For Vision Pro Headsets Announced

Accompanying the news of the upgraded features in visionOS 2, Apple has also announced that it will be making its Vision Pro headset available in eight new countries – China, Japan, Singapore, Australia, Canada, France, Germany and the UK, and that the first release of the headset will be in China, Japan, and Singapore on June 28. 

Apple Intelligence 

The most significant announcement from WWDC24 is the introduction of Apple Intelligence, a new AI initiative aimed at integrating personal and private AI capabilities across Apple’s ecosystem. There was some concern that Apple has fallen behind in AI and its announcement that it is partnering with OpenAI to include its technology and ChatGPT, which prompted an angry reaction on X by Elon Musk (citing privacy concerns – although possibly more about competition concerns) is a significant strategic shift for Apple. 

Apple Intelligence includes, for example, significant upgrades to Siri (as outlined below), making interactions more natural and advanced, and other functionalities with advanced, personal, and private AI capabilities. Apple CEO, Tim Cook, described Apple Intelligence as “the next frontier” in personal AI and explained that the reason why it is so effective is that it will be able to “understand you and be grounded in your personal context, like your routine, your relationships, your communications and more”. 

Siri Upgrade 

The new Apple Intelligence AI initiative has meant that Siri, Apple’s virtual assistant, has received a substantial upgrade. The AI enhancements make Siri more conversational and contextually aware, so it can handle more complex tasks and understand a wider variety of requests. This should include being able to summarise incoming messages, executing commands across multiple apps, and integrating more naturally with users’ daily activities. Apple has also emphasised how most processing will be done ‘on-device’ to help user privacy. 

One significant announcement is, of course, that Siri will also be one of the apps that will be able to use OpenAI’s ChatGPT for “expertise”. Tapping into ChatGPT will also mean that users will also be able to include photos with questions for ChatGPT (via Siri) and even ask questions related to docs or PDFs. 

Developers And Siri 

It’s also worth noting here that Siri’s new capabilities will also allow developers to enable voice command access to any app menu items and displayed text without additional coding. This means users can issue commands like “show my presenter notes” in a slide deck or “FaceTime him” from a reminder, enhancing app functionality through natural language interactions and improving user experience. 

Next-Generation CarPlay 

Apple provided an updated look at the next-generation CarPlay system, the in-car system that allows users to integrate their iPhone with their vehicle’s infotainment system. The improvements include new Vehicle, Media, and Climate apps, designed to offer a more integrated and enhanced user experience. 

What Does This Mean For Your Business? 

The WWDC24 announcements appear to signify a transformative phase for Apple, with their belated yet determined and substantial adoption of AI all the way through their entire estate standing out as a strategic pivot. This initiative, which includes a partnership with OpenAI’s ChatGPT, enhances Siri’s capabilities, making it more contextually aware and conversational. For business users, this means more efficient and natural interactions with their devices, potentially improving productivity and streamlining workflows.  

The upgrades across iOS, macOS, iPadOS, watchOS, and tvOS collectively may create a more cohesive and powerful Apple ecosystem. For instance, iOS 18’s customisation options and AI-powered tools should make iPhones more versatile and user-friendly, while macOS Sequoia’s new features may enhance productivity through smarter password management, improved multitasking, and seamless integration with iPhones. These improvements could help businesses better manage their digital environments, ensuring that employees can work more efficiently and securely. 

The introduction of Messages via satellite with iOS 18 is significant for businesses operating in remote areas or in sectors where connectivity is often an issue, such as logistics, construction, and outdoor events, i.e. ensuring continuous communication, which is crucial for operational efficiency and safety. 

Apple’s Vision Pro headset and the enhanced visionOS 2 signals a move towards more immersive and interactive experiences. For industries such as design, training, and presentations, the ability to turn photos into interactive experiences and use spatial navigation may offer new ways to engage and educate. The expanded international availability of the Vision Pro headset may also open up new markets and opportunities for businesses worldwide. 

The updates to watchOS 11, with enhanced fitness and health tracking capabilities, emphasises Apple’s commitment to health and wellness, which may be particularly beneficial for businesses focusing on employee well-being and productivity. The new features in tvOS 18, such as AI-enhanced subtitles and detailed information while watching, enhance the user experience for both personal and professional usage, perhaps making Apple TV a more compelling option, e.g. for business presentations and entertainment. 

Overall, Apple’s latest announcements reflect a strategic effort to integrate advanced AI and machine learning technologies across its product range. This not only addresses fears of Apple lagging behind in AI but this could even position Apple as a leader in the AI space. It also offers business users innovative tools to enhance productivity, connectivity, and user-engagement. By leveraging the advancements outlined by Apple at WWDC24, businesses could improve their operational efficiency, employee satisfaction, and customer interactions, which may ultimately give Apple a stronger foothold in the competitive tech marketplace.

The post Featured Article : Apple Avalanche! appeared first on Mear Technology.

Alexa The Mimic 

Recently, Amazon announced that it was working on technology to enable its Alexa digital assistant to take on the voice of anyone, e.g. the voice of a user or any of their loved ones. It was reported that Rohit Prasad, an Amazon senior vice president, said at a Las Vegas conference that the reason was to help users to “make the memories last” following the loss of loved ones in the pandemic and that a video segment highlighted how Alexa could, in theory, read a story to a child in the voice of his/her grandmother! 

Other Voice Mimicking Options 

There are many different options available for creating a fake voice / digitally cloning a user’s own voice. Some examples include: 

– Microsoft’s Custom Neural Voice is a text-to-speech feature that allows users to create a one-of-a-kind, customised, synthetic voice for their applications, and build a highly natural-sounding voice by providing their own audio samples as the training data. Microsoft says it can “represent brands, personify machines, and allow users to interact with applications conversationally”. It also has a use in restoring impaired people’s speech. 

– Respeecher is a digital voice cloning tool which the company says is “indistinguishable from the original speaker” and has been designed for use by filmmakers, game developers, and other content creators. 

– Resemble AI, which offers custom brand voices for assistants, e.g. a user’s own voice for their smart assistant, Alexa and Google Assistant and integrates with DialogFlow, IBM Watson, or any other NLU engine. 

– Descript, which is a deepfake voice generator that can be used to create realistic voices based on transcripts or audio clips, and can create a text-to-speech model of your voice. 

– Scotland-based ‘CereVoice Me,’ which is a voice cloning system that allows users to produce a text-to-speech (TTS) version of your own voice for Windows. 

– iSpeech, a free voice cloning platform to create familiar voice interfaces for products, applications, and services. 

– ReadSpeaker, is proprietary voice cloning software that produces text-to-speech (TTS) voices that are indistinguishable from the source and offers a range of TTS engines that allow a cloned voice to speak across all a user’s audio channels: smart speaker apps, interactive marketing campaigns, advertisements, and more.

What Could Possibly Go Wrong? 

The recent announcement of Amazon’s plans to allow Alexa to mimic voices triggered long-held concerns that the cloned voices could be used to launch deep fake audio attacks on some voice authentication security systems.  

One real-life example from 2019 is when hackers were able to use AI software to mimic an energy company CEO’s voice in order to steal £201,000 from a UK-based energy company. The CEO of the company received a phone call from someone that he believed to be the German chief executive of the parent company.  The person on the end of the phone ordered the CEO of the UK-based energy company to immediately transfer €220,000 (£201,000) into the bank account of a Hungarian supplier. The voice was reported to have been so accurate in its sound, that the CEO of the energy company even recognised what he thought was the subtleties of the German accent of his boss, and even “melody” of the accent. The call was so convincing that the energy company made the transfer of funds as requested. 

Other concerns about the use of voice cloning include: 

– Issues of consent and disclosure, i.e. of the person whose voice is used, and informing the listener that the voice is fake. For example, Microsoft has now stipulated that its Custom Neural Voice AI model cannot be used to mimic a voice without that person’s consent, and software will have to disclose that voices are fake. 

– Concerns that AI (e.g. for faking voices) is advancing too far ahead of regulation, which has led Microsoft to say that existing customers must obtain permission to continue using the Custom Neural Voice tool from June 30, 2023, and new customers will have to apply to use it, with Microsoft deciding whether the intended usage is appropriate. 

– Criticism (by Rights activists) that internal company ethics committees deciding what is appropriate in the use of a voice mimicking software can’t be truly independent and their public transparency is limited by competitive pressures, and that external oversight may be necessary. 

What Does This Mean For Your Business? 

Although there are good arguments for value of software that can clone a voice, e.g. interfaces for products, applications, and services, and for use by filmmakers, game developers, and other content creators, there are concerns that they could also be used to make deepfakes for sinister purposes. For examples, this could be to get past voice authentication security systems, or to impersonate people to obtain money. There are also ethical concerns about how producers of these tools decide upon appropriate usage and matters of consent. Clearly, a balance needs to be struck and many people feel that more regulations and external oversight are needed to limit risk and potential harm. 

The post How Easy Is It To Clone Someone’s Voice? appeared first on Mear Technology.

Device Management Solution For Small Businesses

Aimed at business with up to 500 employees, Apple says that ‘Business Essentials’ has been designed to make it easy to manage every aspect of the Apple devices in the customer’s organisation as the organisation grows. Apple says this device management package for small businesses “makes managing Apple devices as easy as using them,” and that it’s “like having the big IT department, without having the big IT department.” Apple says that Business Essentials will allow a small business to easily configure, deploy, and manage Apple products from anywhere.

What Is Included With ‘Business Essentials’?

The service is described as a “complete solution” and includes help with setup, onboarding (described as being “as easy as logging in”), backup (using iCloud), security (built-in), support (24/7 with AppleCare), repairs, and updates. Apple stresses that the service will make it easy to get replacements and update devices.

There is also a new Apple Business Essentials app that employees can use to install apps assigned for work and to request support.

Collections

Within Business Essentials, ‘Collections’ enables IT personnel to configure settings and apps for individual users, groups, or devices. This means that when employees sign in to their corporate or personally owned device with their work credentials, Collections automatically pushes settings such as VPN configurations and Wi-Fi passwords. Also, Collections will install the new Apple Business Essentials app on each employee’s home screen, where they can download corporate apps assigned to them, such as Cisco Webex or Microsoft Word.

Security

Business Essentials allows IT managers to enforce critical security settings such as FileVault for full-disk encryption on Mac, and Activation Lock to protect devices that may be lost or stolen. Apple Business Essentials also ensures these can’t be turned off by mistake. For BYOD, when employees use a personal device at work, ‘User Enrolment’ creates cryptographic separation for work data, to ensure employee data remains private while company data remains secure.

Support and Repairs

Apple says businesses have the option to add fast and reliable service for employee devices with prioritised Apple Support. Also, when a business adds AppleCare+ for Business Essentials to their plan, they will receive 24/7 access to phone support, training for IT administrators and employees, and up to two device repairs per plan each year. One aspect that may be particularly appealing in the world of remote and hybrid work is that with Business Essentials, Employees can initiate repairs directly from the new Apple Business Essentials app, and an Apple-trained technician will come onsite in as little as four hours to fix their device.

When?

Business Essentials is currently only available for small businesses in the U.S. with up to 500 employees but potential users can apply to try Apple Business Essentials before its release in spring 2022 by enrolling here: https://smb.apple.com/essentials/ .

How Much?

There are three different Business Essentials plans available which can be customised to support each user with up to three devices and up to 2TB of secure storage in iCloud, starting at $2.99 per month, with optional AppleCare+ for Apple Business Essentials.

What Does This Mean For Your Business?

With many different SMBs now using Apple devices for employees, and perhaps employees using their own Apple devices for work, and businesses operating remote and hybrid working practices, this sounds like a valuable service. Not only does it offer security and control, but the fact that it offers training and support and promises to be easy to set up and operate is likely to make it attractive to many businesses that are getting used to subscription-based everything, and who may not have the tech expertise in-house. It also sounds flexible enough to grow easily with businesses as they expand and change and provides a manageable way for them to move from BYOD (while ensuring data security) to IT deployed. For Apple, it is a way to get more enterprise business, learn more about its SMB customers and their needs going forward, and be immediately on hand when new devices are needed thereby retaining its customers and their loyalty.

The post Apple’s New ‘Business Essentials’ appeared first on Mear Technology.

Home Working

Working at home because of the pandemic has led to companies wanting to monitor employee online activity and employees becoming concerned about how this could impact upon their privacy.

Which Tools?

Real-time, employee tracking/monitoring tools include software such as StaffCop, Teramind, Hubstaff, Time Doctor, Flexi Spy, and CleverControl.  The primary focus of these tools is to enable managers to measure the productivity of employees and to flag-up any potential issues e.g. employees not working within company guidelines, or employee productivity levels indicating that support/training/help is needed. Also, monitoring can reveal evidence of other serious issues e.g. bullying.

Monitoring What?

The kinds of metrics and details that employee monitoring software solutions can highlight are:

– Taking sample screenshots/recording screens.

– Whether employees are active/inactive during working hours.

– How much time is spent on the Internet, plus whether games are being played or social media accessed too much.

– Whether employees are using work devices for work or private purposes.

Increased Demand

Whilst many industries monitor employee activity and productivity in a certain way, the current physical division of the workforce, particularly in service industries, away from the office and any normal office-based monitoring methods has led to an increase in demand for and the use of employee monitoring/tracking software solutions.

For example, while only 30 per cent of companies monitored their employees this way in 2015, this figure rose to 50 per cent in 2018 (Gartner) and it was predicted (Gartner) that 80 per cent of companies would be monitoring employees anyway by 2020.

Research by Accenture in 2019 found that 62 per cent of workers said that their organisations were using new technologies.  When the pandemic hit, however,  a Top 10 VPN study found that demand for employee surveillance software (based on internet searches) increased a massive 87 per cent in April and this carried on into May where searches were 71 per cent higher than pre-pandemic levels.  Internet searches for the phrase “work from home monitoring software” rose over 4,000 per cent in April and remained at over 2000 per cent.

Think They Are Being Monitored

One other interesting study by ‘Clutch’ in August revealed that 21 per cent of respondents believe that their companies use employee monitoring software to track their activities and only 10 per cent of employees would have more trust in their company if that company used monitoring software to track their work.

The Law and Advice

Concerns about employee monitoring focus on the issues of data protection (the data gathered about individual employees) and privacy.  Laws relating to the monitoring of employees include Article 8 of the European Convention on Human Rights whereby individuals have a non-absolute right to respect for their private and family life and correspondence and GDPR.  Under GDPR, data needs to be processed lawfully, fairly, and transparently as well as being collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes.  Also, monitoring data must be adequate, relevant, and limited to what is necessary for those purposes.

Further guidance comes from the ACAS which (on its website) notes that although employers can monitor employees, it should be remembered that workers are entitled to some privacy at work and employers must tell employees about any monitoring arrangements and the reason for it. Employers should have procedures in place setting out what is and what isn’t allowed, and these procedures should be made clear and understood by all workers before monitoring begins. Generally, employers must have a genuine reason to carry out covert monitoring such as criminal activities or malpractice, and any monitoring should be limited, targeted and within certain times, and employers should also have regard for private communications.

What Does This Mean For Your Business?

Employee monitoring software has been used for many years as a tool to help manage productivity and ensure that company policies and procedures are adhered to.  The upsurge in demand this year is, however, an understandable reaction by businesses as they try to very quickly adapt to having to suddenly manage a remote workforce and yet maintain standards and styles of management that are consistent with their business. Monitoring employees in this way can bring many business benefits such as giving closer and unbiased insights, saving costs, freeing-up management time and getting early warnings.  It is important, however, to understand that there are rules and guidelines to adhere to and that keeping employee trust, maintaining morale and displaying behaviour that sends positive motivational messages to employees can also be contributors to productivity.

The post Huge Demand for Employee Monitoring Software appeared first on Mear Technology.

What Is Dark Mode?

Dark mode/dark theme/night mode is a light-on-dark colour scheme for operating systems that use light-coloured text, icons, and graphical user interface elements on a dark background. Dark mode can be used on Android, iOS, PCs, Macs, and individual apps.

Good For Health and Battery Life?

The main reasons for operating systems and apps offering dark mode appear to be that:

– It could be better for health in terms of reducing the risk of eye strain where you may have been looking at the screen for a long time and/or you are working into the night.

– Dark mode consumes less energy and is less likely to drain your battery.

– It is aesthetically pleasing to use and is valued by many users and can feel like a more comfortable alternative when working in dimly lit environments.

– Dark mode is found to be helpful by gamers.

– Having light text on a dark background can make the text more legible/readable. There is some research evidence to support this – 2013 Research by psychologists Cosima Piepenbrock and Susanne May.

– It could be a way to help individuals with light sensitivity or visual impairments (According to Jonathan Chow, a senior UX designer at Reddit – see below).

Proof?

The issue of whether dark mode is better for your health (vision) is now a contentious one.  Reference can be found in many places on the Web to a 2018 article in ‘Popular Science’ (by Eleanor Cummins ) which offers insights by Jonathan Chow, a senior UX designer at Reddit, into how dark mode could help, but the article doesn’t deliver scientific proof as such.

Whether dark mode can save your battery power in your phone, for example, depends on the type of screen you have. An organic light-emitting diode (OLED) screen makes pixels light up or turn off individually.  This means that in dark mode, pixels that show as black are de-activated, thereby saving energy. With LED screens, even pixels that display as black are activated/lit up, therefore, meaning that there is no real energy-saving benefit.  The iPhone X, for example, was the first Apple phone with an OLED screen.

Different Times

Different tech companies and app-makers added dark modes/dark themes to their products, platforms, and systems at different times. For example, Google introduced dark mode to Android back in November 2018 (to save battery life), while Apple announced the introduction of a light-on-dark mode to all native applications in iOS 13 and iPadOS in June 2019. A timeline of when different companies introduced dark mode can be found in the ‘History’ section of this page: https://worddisk.com/wiki/Dark_mode/.

A full list of apps offering dark mode can be found here: https://darkmodelist.com/.

Facebook Introduces Re-Design With Dark Mode

Facebook has only just (May 2020) introduced its re-designed desktop site which now includes dark mode.  This can be switched on by clicking on the down arrow (end of the upper menu bar) to pull up the old Facebook’s settings menu, clicking on “Switch to new Facebook”, then clicking the same down arrow and toggling dark mode from off to on.

How To Turn On Dark Mode

Here is brief summary of how to turn on dark mode for different Operating Systems and apps:

iOS

To get dark mode in iOS, swipe from the home screen to go to the control centre and go to settings, tap ‘Display & Brightness’, tap either ‘Light’ or ‘Dark’ to choose which appearance you prefer. After turning it to automatic go to ‘Options’ to choose when dark mode comes on e.g. sunset to sunrise every day or at certain times.

Another way to achieve the same thing is to go to settings, tap ‘Display & Brightness’, tap either ‘Light’ or ‘Dark, and tap the toggle underneath to set dark mode to come on automatically.  As before, after turning it to automatic go to ‘Options’ to choose when dark mode comes on e.g. sunset to sunrise every day or at certain times.

Android

Dark mode/dark theme, which became available for Android (10) in November 2019 can be operated by going to Settings, ‘Display’, ‘Advanced’ and then using the dark theme on/off toggle. This can also be done via the quick settings in the notification bar.

Mac

Dark Mode on an Apple Mac can be turned on by going to the Apple menu (top left), choosing System Preferences, and choosing the ‘dark’ option.  Dark mode works on macOS Mojave or later for any Apple program and many third-party apps.

Windows

To enable dark mode on Windows 10, go to Settings, Personalisation, Colours and choose the default windows app mode as light or dark.

Edge also has a dark mode option.  To enable it, go to the menu (top right) and select ‘Settings’ from the dropdown list, and then choose ‘dark’ from the themes options (light or dark).

Apps

Some apps allow dark mode. For example:

WhatsApp – tap the three dots (top right corner), select Settings, and under Chats choose the dark theme as the system default.

Twitter – On mobile, tap your profile picture, go to Settings and Privacy, then Display and Sound, and switch dark mode on. On the desktop, click the three dots (left menu), select Display, and choose lights out and dim options.

Gmail – go to the three lines (top left on mobile device), scroll and tap Settings, then General Settings, and choose dark as the system default.

What About Night Mode and Blue Light?

The current thinking, which has led to manufacturers adding filters to our devices (e.g. Night Shift in the iPhone 11 and even the Windows 10 Night Mode) that show warmer colours at night is based on the idea that too much exposure to artificial blue light emitted by our devices at night is bad for us. For example, too much blue light displayed on the screen of a device has been thought to suppress the production of sleep-inducing hormone ‘melatonin’, hence the need to filter out the blue and replace it with warmer colours. Samsung also suggests that its filter could “reduce digital eye strain”.

Recent University of Manchester research, however, has shown that this popularly accepted wisdom may be wrong and that, in fact, the warmer colours of filters are more likely to suppress the production of melatonin than the blue light glow from our devices.

In Conclusion

Even though there are questions about scientific proof that claims certain health benefits, dark mode appears to be popular with customers in terms of aesthetics and reading in dimly lit environments, plus competitors have introduced it, thereby making it something that tech companies feel they have to offer anyway. For mobiles, having dark mode with an OLED screen can save battery power, so there is also some practical value for many users to enable dark mode.

The post How ‘Dark Mode’ Can Help appeared first on Mear Technology.

Looking Forward

In part 1 of this ‘Email Security’ snapshot, we looked at how most breaches involve email, the different types of email attacks, and how businesses can defend themselves against a variety of known email-based threats. Unfortunately, businesses and organisations now operate in an environment where cyber-attackers are using more sophisticated methods across multi-vectors and where threats are constantly evolving.

With this in mind, and with businesses seeking to be as secure as possible against the latest threats, here are some of the prevailing predictions based around email security for the coming year.

Ransomware Still a Danger

As highlighted by a recent Malwarebytes report, and a report by Forbes, the ransomware threat is by no means over and since showing an increase in the first quarter of 2019 of 195 per cent on the previous year’s figures it is still predicted to be a major threat in 2020. Tech and security commentators have noted that although ransomware attacks on consumers have declined by 33 per cent since last year, attacks against organisations have worsened.  In December, for example, a ransomware attack was reported to have taken a US Coast Guard (USCG) maritime base offline for more than 30 hours.

At the time of writing this article, it has been reported that following an attack discovered on New Year’s Day, hackers using ransomware are holding Travelex’s computers for ransom to such a degree that company staff have been forced to use pen and paper to record transactions!

Information Age, for example, predicts that softer targets (outdated software, inadequate cybersecurity resources, and a motivation to pay the ransom) such as the healthcare services will be targeted more in the coming year with ransomware that is carried by email.

Phishing

The already prevalent email phishing threat looks likely to continue and evolve this year with cybercriminals set to try new methods in addition to sending phishing emails e.g. using SMS and even spear phishing (highly targeted phishing) using deepfake videos to pose as company authority figures.

As mentioned in part 1 of the email security articles, big tech companies are responding to help combat phishing with new services e.g. the “campaign views” tool in Office 365 and Google’s advanced security settings for G Suite administrators.

BEC & VEC

Whereas Business Email Compromise (BEC) attacks have been successful at using email fraud combined with social engineering to bait one staff member at-a-time to extract money from a targeted organisation, security experts say that this kind of attack is morphing into a much wider threat of ‘VEC’ (Vendor Email Compromise). This is a larger and more sophisticated version which, using email as a key component, seeks to leverage organisations against their own suppliers.

Remote Access Trojans

Remote Access Trojans (RATs) are malicious programs that can arrive as email attachments.  RATs provide cybercriminals with a back door for administrative control over the target computer, and they can be adapted to help them to avoid detection and to carry out a number of different malicious activities including disabling anti-malware solutions and enabling man-in-the-middle attacks.  Security experts predict that more sophisticated versions of these malware programs will be coming our way via email this year.

The AI Threat

Many technology and security experts agree that AI is likely to be used in cyberattacks in the near future and its ability to learn and to keep trying to reach its target e.g. in the form of malware, make it a formidable threat. Email is the most likely means by which malware can reach and attack networks and systems, so there has never been a better time to step up email security, train and educate staff about malicious email threats, how to spot them and how to deal with them. The addition of AI to the mix may make it more difficult for malicious emails to be spotted.

The good news for businesses, however, is that AI and machine learning is already used in some anti-virus software e.g. Avast, and this trend of using AI in security solutions to counter AI security threats is a trend that is likely to continue.

One Vision of the Email Security Future

The evolving nature of email threats means that businesses and organisations may need to look at their email security differently in the future.

One example of an envisaged approach to email security comes from Mimecast’s CEO Peter Bauer.  He suggests that in order to truly eliminate the threats that can abuse the trust in their brands “out in the wild” companies need to “move from perimeter to pervasive email security.  This will mean focusing on the threats:

– To the Perimeter (which he calls Zone1).  This involves protecting users’ email and data from spam and viruses, malware and impersonation attempts, data leaks – in fact, protecting the whole customer, partner and vendor ecosystem.

– From inside the perimeter (Zone 2).  This involves being prepared to be able to effectively tackle internal threats like compromised user accounts, lateral movement from credential harvesting links, social engineering, and employee error threats.

– From beyond the perimeter (Zone 3).  These could be threats to brands and domains from spoofed or hijacked sites that could be used to defraud customers and partners.

As well as recognising and looking to deal with threats in these 3 zones, Bauer also suggests an API-led approach to help deliver pervasive security throughout all zones.  This could involve businesses monitoring and observing email attacks with e.g. SOARs, SIEMs, endpoints, firewalls and broader threat intelligence platforms, feeding this information and intelligence to security teams to help keep email security as up to date and as tight as possible.

Into 2020 and Beyond

Looking ahead to email security in 2020 and beyond, companies will be facing plenty more of the same threats (phishing, ransomware, RATs) which rely on email combined with human error and social engineering to find their way into company systems and networks. Tech companies are responding with updated anti-phishing and other solutions.

SME’s (rather than just bigger companies) are also likely to find themselves being targeted with more attacks involving email, and companies will need to, at the very least, make sure they have the basic automated, tech and human elements in place (training, education, policies and procedures) to help provide adequate protection (see the end of part 1 for a list of email security suggestions).

The threat of AI-powered attacks, however, is causing some concern and the race is on to make sure that AI-powered protection is up to the level of any AI-powered attacks.

Taking a leaf out of companies like Mimecast’s book, and looking at email security in much wider scope and context (outside the perimeter, inside the perimeter, and beyond) may bring a more comprehensive kind of email security that can keep up with the many threats that are now arriving across a much wider attack surface.

The post Featured Article – Email Security (Part 2) appeared first on Mear Technology.

Using Encryption

Encryption can be used for most things that have an internet connection, such as messaging apps, personal banking apps, websites, online payment methods, files and more.

Why?

Cybercriminals seek our personal data (especially financial details) which they can find in our files, on our personals devices, and on websites / platforms and places online where we have submitted that data e.g. for registration/login, payment, in the form of emails and other messages, and our personal data may be stored in many different places (servers and databases) across the Internet and the digital world.

Verizon figures show that nearly one-third of all data breaches in 2018 involved phishing and that phishing was present in 78% of cyber-espionage incidents and the installation and use of ‘back-doors’.  Also, IT Governance figures, for example, show that 421,103,896 data records were confirmed to have been breached in October this year (still only 50% of the monthly average!) in 111 incidents (including the compromising of sensitive and financial information).

A recent nCipher survey showed that the main driver for encryption is the protection of sensitive information and that organisations use encryption to protect intellectual property and the personal information of their customers.

Symmetric and Asymmetric Encryption

There are two main encryption methods, symmetric and asymmetric, both of which are made up of encryption algorithms, and the use of prime numbers forms a fundamental aspect of popular encryption methods.

Note: You will often hear the term ‘keys’ used as part of the explanation of encryption.  Keys in this sense means a random (but unique) string of bits that are generated by an algorithm to scramble and unscramble data.  Generally, the longer the key, the harder it is to break the encryption code.

Symmetric encryption uses the same (identical) key for encrypting and decrypting data. With symmetric encryption, two or more parties have access to the same key. This means that although it is still secure, anyone who knows how to put the code in place can also reverse engineer it.  Symmetric key encryption is generally used for encrypting large amounts of data efficiently e.g. 256-bit AES keys are symmetric keys.

Asymmetric encryption on the other hand, uses a pair of keys, one for encrypting the data and the other for decrypting it. For the first key (used to encrypt data), ‘public key’ cryptography uses an algorithm to generate very complex keys, which is why asymmetric encryption is considered to be more secure than symmetric encryption (the code can’t be run backwards).  With asymmetric encryption, the public key is shared with the servers to enable the message to be sent, but the private key (owned by the possessor of the public key) is kept secret. The message can only be decrypted, therefore, by a person with the private key that matches the public one. Different public-key systems can use different algorithms.

Public Key Encryption – HTTPS

Public key encryption is widely used and is useful for establishing secure communications over the Internet e.g. for TLS/SSL, which enables HTTPS.  For example, A website’s SSL/TLS certificate is shared publicly and contains the public key, but the private key is on the origin server i.e. it is “owned” by the website.

Different Methods of Encryption

There numerous common encryption algorithms and methods.  These include:

• RSA – Unveiled by three mathematicians back in 1977, RSA is a public-key encryption algorithm and a common standard for encrypting data sent over the internet.
• Triple DES – designed to replace the original Data Encryption Standard (DES) algorithm and uses three individual keys with 56 bits each.  Triple DES is being used less frequently now but is still used in financial services and other industries.
• Blowfish – also designed to replace the original Data Encryption Standard (DES).  This is a flexible and strong standard that is found in many different software categories e.g. e-commerce platforms (to protect passwords).
• Twofish – One of the fastest, can be used in hardware and software environments, and (like Blowfish) is freely and often bundled in encryption programs.
• AES – Advanced Encryption Standard (AES) is an incredibly strong encryption algorithm used by the U.S. Government, and likely to become the private sector standard in future.

Free Encryption

In addition to Blowfish and Twofish, other free encryption tools include LastPass (a popular password manager), VeraCrypt (available for Windows, OS X and Linux OS), and FileVault2 (good for encrypting data on macOS devices and Mac hardware).

Windows 10 includes its own encryption tool ‘BitLocker’ which enables you to use encryption on your PC’s hard drive and on removable drives.

End-to-End Encryption

End-to-end encryption is used to encode and scramble information so only the sender and receiver can see it. For example, WhatsApp uses end-to-end encryption and although the messages go through a server, none of those messages can be read by anyone other than the sender and receiver.

WhatsApp and its end-to-end encryption were criticised by Amber Rudd in 2017 (who was Home Secretary at the time) when it was revealed that the first London Bridge terror attackers used WhatsApp to plan the attack and to communicate.  This led to government calls for ‘back-doors’ to be built-in to WhatsApp and other end-to-end encrypted communications tools to allow government monitoring.  These calls were resisted on the grounds that building back doors means that security is compromised, and cybercriminals could also exploit these back doors.

Fails

Although encryption provides effective security and privacy it is not always infallible. For example:

• Back in May 2018, A German newspaper released details of a security vulnerability discovered by researchers at Munster University of Applied Sciences, in PGP (Pretty Good Privacy) data encryption. PGP is an encryption program that is used for signing, encrypting, and decrypting texts, e-mails, files, directories, and disk partitions, and to increase the security of e-mail communications.
• Also, in October this year a report by a former Google employee on the ‘Freedom of the Press Foundation’ website warned organisations that any data stored on Google’s G Suite is not encrypted, can be accessed by administrators and can be shared with law enforcement on request.

Quantum Threat

One of the threats to existing encryption that many tech commentators fear in the near future comes from quantum computers.  For example, quantum computers can perform calculations much faster than classical computers and this could enable them to defeat the encryption that currently protects our data e.g. our online banking records and other personal documents on hard drives.  With people having access to (commercial) quantum computers, this could become a real threat (e.g. access to Quantum Systems are now being offered via the cloud).

As well as the quantum threat, there is also some concern among tech and security commentators about the encryption and anonymisation technology that is being used to hide criminal activity e.g. on the dark web.

The Future

In the (immediate) future therefore, some companies are seeking to address the threat posed by quantum computers being able to crack existing encryption algorithms. Estimates of when there will be commercially available quantum computers range between 10 and 20 years, although state-sponsored use of quantum computers for wrongdoing could conceivably happen sooner.

The National Institute of Standards and Technology is already pushing researchers to look ahead to this “postquantum” era.

Recently, IBM researchers developed two quantum-proof cryptographic algorithms (Kyber and Dilithium) which now make up the “Cryptographic Suite for Algebraic Lattices” (CRYSTALS).  These have enabled IBM to create the world’s first quantum computing-safe tape drive.

In the meantime, with cyber threats evolving at a fast pace, companies and organisations that don’t use encryption as one of their security tools are effectively making things too easy for cybercriminals to access their data, with potentially devastating consequences.

The post How Does Encryption Work? appeared first on Mear Technology.

What Is Slack?

Slack, launched in 2013, is a cloud-based set of proprietary team collaboration tools and services. It provides mobile apps for iOS and Android, and is available for the Apple Watch, enabling users to send direct messages, see mentions, and send replies.

Slack teams enable users (communities, groups, or teams) to join through a URL or invitation sent by a team admin or owner. Slack was intended to be an organisational communication tool, but it has gradually morphed into a community platform i.e. it is a business technology that has crossed over into personal use. Slack recently introduced an “email bridge” into its platform that will allow those who only have email to communicate with Slack users.  Back in May last year, ‘Slack’ introduced a new ‘Actions’ feature that made it easier for users to create and finish tasks without leaving by having access to more 3rd party tools.

In October this Year Slack announced that it has 12 million daily active users, which is 2 million increase since January.

What Is Teams?

Teams, announced in November 2016 and launched by Microsoft in 2017, is a platform designed to help collaborative working and combines features such as workplace chat, meetings, notes, and attachments. Described by Microsoft as a “complete chat and online meetings solution”, it normally integrates with the company’s Office 365 subscription office productivity suite. In July 2018, Microsoft introduced a free, basic features version of Teams which did not require an Office 365 account, in order to increase user numbers and tempt users away from Slack.

Microsoft Teams is also the replacement for Skype for Business Online, the support for which will end on 31 July 2021, and all new Microsoft 365 customers have been getting Microsoft Teams by default from 1 September 2019.

Share Tumble For Slack

Slack’s share value fell earlier this year after it announced that its projected sales growth would be lower for the second half of the year. Slack became a publicly-traded company on the New York Stock Exchange in June, and investors have been saying that it will need to maintain an impressive growth rate to compete against competitors like Microsoft (with Teams), Alphabet (Google) and Facebook.

The recent announcement by Microsoft that Teams has 20 million daily active users compared to Slack’s 12 million and has increased daily active users by more than 50% from June caused another downward push on Slack’s share value.

Slack’s Challenge – To Get More Large Paying Customers

Slack, which enjoys popularity in the U.S corporate workplace has been trying to emphasise that it is not just a chat/messaging app, but that it can connect to companies’ other applications in a way that can streamline workflows and aid real value addition and savings.  Slack is, however, facing a challenge in convincing big businesses that it is worthy, paid-for alternative to its more well-known competitors, and according to Bloomberg Intelligence analyst Andrew Eisenson, less than 1% of Slack’s customer base are large customers that spend more than $100,000 a year. One of the problems that Slack has is that although large companies in the US use it and like it, they currently have a free version, so Slack will have to convince them to upgrade to the paid-for version.

Despite having lower user numbers than Teams, some tech commentators have noted that Slack has stickiness and strong user engagement which help to attract businesses that want to get into using workstream collaboration software.

What Does This Mean For Your Business?

Microsoft has the advantage of a very well-known and trusted brand with huge reach, Teams already integrates with Office 365’s subscription office productivity suite, and there’s now a free version that doesn’t even require an Office 365 account.  Also, Teams is set to replace Skype for Business Online next year, and Microsoft has made sure that Skype for Business Online customers know that Microsoft’s investment and interoperability will make the migration to Teams a fairly painless one.

All this means that Teams appears to be in a very good position to continue what has been a rapid growth this year, and despite Slack’s positive features, Slack will have to fight hard to get big businesses interested in order to compete.

For users, there are now several good collaborative working services to choose from, but at the present time, the facts that investors don’t know when Slack is going to be profitable, coupled with a fall in revenue have led some commentators to think that Teams is looking as though it could come out on top.

The post The Battle Between ‘Slack’ and ‘Teams’ appeared first on Mear Technology.

Apple Card

The newly launched (in the US) no fees, instant cash-back Apple Card is a partnership between Apple and Goldman Sachs with processing by Mastercard.  The Apple Card is operated through the Wallet app on iPhone (iPhone 6 and later) and is accompanied by a physical laser-etched card, made of coated titanium and with no card number, no CVV security code, and no expiration date or signature on it.

Soft Materials Are Best

Unfortunately for Apple, just as the Card’s online blurb was unveiled to the world some of the media’s attention was diverted to Apple’s advice about how to “safely” store and carry the card rather than to its security features.

Some online commentators couldn’t fail to notice that for a sleek looking, titanium card, it appears to be vulnerable to damage and discolouration from some of the ways that customers may expect to carry and store a normal plastic credit card.

For example, according to Apple’s own card-care advice, the Apple Card may be vulnerable to discolouration and damage from:

• Storing the card in the card in a slot in a wallet or billfold touching another credit card.
• Coming into contact with fabrics, like leather and denim, which may cause permanent discolouration that will not wash off.
• Placing the card in a pocket or bag that contains loose change, keys, or other potentially abrasive objects.
• Placing the Apple Card near magnets (which could de-magnetize the strip).

The Coating

Apple says on its website that it is the multi-layered coating on the card that gives the card its white finish that could be damaged or discoloured, and not the titanium card beneath.  Although titanium is a very reactive metal, it is known for its strength and its corrosion resistance in oxidising acid environments.

What Does This Mean For Your Business?

Some commentators see this as a gaffe by Apple as the launch of something that sees Apple make a major move into services has been slightly tarnished itself by what appears to be either a problem with the coating of the Apple Card, or Apple giving out a bit too much information about the care of the card, or a bit of both.

Expecting customers to keep the Apple Card in its own separate bag made of only soft materials may be a little unrealistic and impractical, and it remains to be seen how the card fares in the real world and what stories come from the first users of the card, and whether the card is as susceptible to damage as the Apple website appears to indicate.

This story is also an example to businesses of how attempts to differentiate products and services and to add value should be carefully thought through and tested before public launches, and products that customers are familiar with need to be at least as convenient and practical to use as competing products.

The post No Leather, Jeans, Hard Surfaces, Other Credit Cards or Magnets – Warning for Apple Card appeared first on Mear Technology.

What’s A VPN?

A ‘Virtual Private Network’ (VPN) is generally used to keep internet activity private, evade censorship / maintain net neutrality and use public Wi-Fi securely e.g. avoid threats such as man-in-the-middle attacks.  A VPN achieves this by diverting a user’s traffic via a remote server in order to replace their IP address while offering the user a secure, encrypted connection (like a secure tunnel) between the user’s device and the VPN service.

Popular Free Apps

VPNs (Forbes, 2017) are the most searched-for apps in the world, partly because people have become much more concerned with privacy and they have become more afraid of government surveillance of their digital activities.  For example, the UK government’s Investigatory Powers Bill), which was passed into 29th November 2016 as the Investigatory Powers Act (“Snooper’s charter”) means that a large list of UK agencies, including various police forces and government departments, can ask for any UK citizen’s stored browsing history (details of every website and instant messaging apps that you have visited or used in the past 12 months).

China Links To Free VPNs – Security & Privacy Concerns

Bearing in mind that the main reason for getting a VPN is to preserve your privacy and security, the problem with the results of the Metric Labs survey is that they show that over half of the top free VPN apps that people can find e.g. in the App Store and Play Store for UK and US, have Chinese ownership or are based in China.

The problem with being linked to (or based in) China, according to the report about the Metric Labs (top10vpn) survey, is that China tightly controls access to the Internet from within the country, has clamped down on VPN services, and many of the free VPN services with links to China offer little or no privacy protection and no user support.

How Bad Are They?

The investigation revealed that 17 of the 30 top free VPN apps available from simple online searches have links to China and 86% of those apps have security issues.  It was also discovered that 64% of apps have no dedicated website, and 86% of apps have unacceptable privacy policies with many being presented in an amateur fashion e.g. posted on a Free WordPress sites with ads.  Some of the privacy policies either give no information about the sharing of information with third parties, have no privacy policy at all, use a stock privacy policy not related to VPNs, or simply state that information will be shared with China.

What Does This Mean For Your Business?

When you bear in mind that the reason for downloading a VPN app is to preserve privacy, the results of this investigation indicate that simply trusting one of the free VPN apps available online, and without pausing to look at its privacy information or look too much into it could be a mistake.  If your privacy is valuable to you (and you’ve not already been provided with a trusted VPN), it may be worth seeking out a trusted paid-for service. There are many lists available online from Tech magazines that offer useful comparisons and information to help you choose a VPN that will give you the right levels of performance and security.

The post Free VPN Tools May Be Linked To China appeared first on Mear Technology.