Sysdig observed a shift left at Container Security

The platform provider Sysdig, which focuses on Secure DevOps, has presented its annual “Container Security and Usage Report” for the fourth time. In the output for 2021, Sysdig comes to the conclusion that more and more users are attaching greater importance to security and monitoring. Almost three-quarters (74 percent) of the DevOps teams surveyed scan their container images early in the build process of their CI / CD pipelines even before deployment. According to Sysdig, Container Security is performing a clear shift left.

Insights into productive container deployments The findings presented in the report are based on the analysis of data from around 2 million container deployments by Sysdig customers. This is only a subset of the containers running daily in Sysdig accounts. In addition, the provider also included publicly accessible data from container deployments at GitHub, Docker Hub and the Cloud Native Computing Foundation (CNCF). In addition to the welcome trend towards a shift left, the data also reveal persistent security problems – especially with regard to the rights settings for containers: In 58 Percent of the examined cases, the images run with root privileges.

Thus, almost two thirds of the examined containers are susceptible to being compromised during runtime. According to Sysdig, the fact that DevOps teams apparently do not shy away from this risk has to do with the fact that many people consider rapid deployment more important. The associated dangers are also put into perspective when looking at the average lifespan of container images. Almost half of all examined images come to runtimes of less than five minutes, not even 20 percent run a day or longer. On the one hand, the very short Lifespan cycles keep the risk of attack low, but also make comprehensive monitoring of the container images during runtime more difficult.

Docker Runtime is becoming less important Sysdig has identified another important trend in the use of container runtimes and registries. Not only since Kubernetes wanted to discontinue support for Docker as a runtime environment, its popularity has suffered. Sysdig users are also increasingly turning to the alternatives Containerd and cri-o. According to the report, Docker Runtime is only used by 36 percent, the shares of Containerd and cri-o have doubled compared to the previous year 33 or 17 percent. It should be noted, however, that Docker is also internally based on Containerd and at least prefer platforms such as Red Hat OpenShift cri-o.

Prefer Sysdig users More and more often the container runtimes Containerd and cri-o compared to Docker.

(Image: Sysdig)

For the container registries for hosting and managing images, Docker still the top position (33 percent), according to Sysdig, competing offers such as Google Cloud Registry (GCP) and Quay are found but increasingly frequent use. GCP with a share of 26 percent is the most important public cloud repository. Quay recorded an increase from to 24 Percent the greatest growth.

The Container Security and Usage Report 2021 also provides other interesting insights into the operative container environments of Sysdig users, for example the use of monitoring and security tools such as Prometheus or the Falco, which Sysdig has handed over to the CNCF. The full report is available for free download on the company website.

(map)

Microsoft cloud: 250 GByte files now welcome

Microsoft is raising the maximum file size in its cloud services to 250 GB. Previously represented in Microsoft 365 the limit 100 GByte The change affects, among other things, SharePoint, Teams and OneDrive.

In the announcement, Microsoft explains that the software breaks down the files for the upload and the individual Segments encrypted with their own key. Once uploaded, they are saved as a backup in Azure Storage.

One big, many small uploads The ones on the Ignite 2019 introduced Differential Sync function ensures that only the changed data of a file have to be uploaded afterwards. This should generally increase the speed, but also ensure that users can work with large files on the go.

With the higher limit, Microsoft is particularly targeting professional users the creative sector, for example with regard to 4K and 8K videos or CAD files, but also data sets from research. Private users should upload photo collections as ZIPs or PC games.

The first users should receive the new function at the end of January. Microsoft is aiming for general availability by the end of the first quarter 2021.

(fo)

amazon-introduces-end-to-end-encryption-for-ring-products

Amazon introduces end-to-end encryption for Ring products

Amazon begins to offer users of Ring products end-to-end encryption of videos. In the US, Amazon has already started a test for some users that includes end-to-end encryption on several smart doorbells and security cameras from Ring.

According to the Amazon subsidiary, videos recorded with Ring products are already encrypted during the upload to the cloud. In addition, the videos are therefore encrypted while they are in the cloud. However, Ring can access these encrypted videos. Various functions, such as streaming videos on certain smart displays, require this access.

With end-to-end encryption, Ring loses the Ability to access the encrypted videos, completely. The key required for decryption is stored locally on the user’s device – usually the linked smartphone.

Opt-in function End-to-end encryption is switched off by default. If you want to activate it, you have to activate it manually in the associated app. Currently supported devices include the Video Doorbell Pro, Video Doorbell Elite, and several security cameras. Ring provides an overview of the compatible devices and the encryption technology used in a PDF document.

Ring had already announced last autumn that end-to-end encryption would be made possible for smart doorbells and security cameras. In the coming months, the feature should reach more and more users – it is not yet known when German users of Ring products will also be able to activate end-to-end encryption.

(dahe)

creative-cloud:-fan-terror-under-big-sur

Creative Cloud: Fan Terror Under Big Sur

Users of macOS 11 alias Big Sur complain about a high processor load from Adobe’s Creative Cloud package. Even on a current MacBook Pro with 16 inch large screen and a fast Intel chip, some of the processes in the creative program suite should reduce the load to almost 100 percent drive.

fan on, battery charged This is visible in the activity display – and above all it can be heard because the fans are spinning up. All you have to do is have the Creative Cloud installed and open one of the programs it contains – such as Photoshop. For some users, however, the fan also rotates without an Adobe app running. The bug also ensures that the battery of notebooks drains much faster.

Two background processes affected The reason for the high processor load seems to be a bug that is in Adobe’s background processes – it apparently only occurs under macOS 11 Big Sur revealed. Affected users report that these are the background processes “CCXProcess” and “CCLIbrary”. You shouldn’t shoot both of them as they are necessary for Adobe programs to work. In addition, the heavy load occurs almost immediately after a restart of the processes.

CCXProcess-Team to the rescue! Adobe itself is busy with the problem, as can be seen in the official forum. The employee Mariia Novikova announced there that the CCXProcess had looked at the matter. A first bug fix is ​​also available, which can be imported using the update function. Novikova promises that if CCXProcess reaches version 4.1.3 afterwards, the error should be resolved. CCLibrary is not mentioned by her, however, possibly the bug in CCXProcess first causes the problem in the library manager.

M1 Macs will soon be supported Adobe recently started to adapt its programs to Apple’s new ARM Macs. There are pre-release versions of Premiere Pro, Rush and Audition as well as Photoshop. However, major changes to the code are necessary on the part of Adobe, which is why the betas currently lack various functions. (bsc)

Caught: rule app reveals pregnancies, photo service builds face recognition

The US FTC has caught two companies improperly using consumer data. You can get away with a settlement with no penalty. The US app Flo, which calculates menstruation and ovulation dates, had promised to protect all data entered. The operating company Flo Health is said to have secretly passed the data on to Facebook, Google, AppsFlyer and Flurry – for advertising and analysis purposes, says the FTC.

The company Everalbum offered the storage of private photos and videos in the cloud under the name Ever. In February 2017 Ever activated face recognition. At that time, Ever introduced a “Friends” feature, with which it automatically compiles photos into image collections based on facial recognition. From September of the same year, Everalbum used photos saved by its customers to develop their own face recognition algorithms.

Secretly exploited private recordings The affected customers knew nothing about it. On the contrary, from July 2018 to April 2019 Ever even claimed that no facial recognition would run on customer images without explicit consent. In fact, however, face recognition should have run automatically over all files. From May 2018 customers in the EU and three US states had the option to switch off face recognition.

The algorithms trained on the basis of customer data formed the basis for Everalbum’s face recognition service “Paravision”. E is now marketed as “Number 1 in the US; UK and Europe” (sic), particularly to large corporations. Everalbum admits to having used the data without consent, but does not want to have revealed any pictures or customer names to its Paravision customers. Everalbum discontinued its cloud storage service Ever last summer.

To make matters worse, Ever allegedly claimed to delete all photos and videos when customers delete their accounts. The FTC accuses the company of keeping all photos and videos of former customers at least until October 2018.

Flo Disclosed Pregnancies Flo has disclosed sensitive personal information, including the fact of pregnancies, according to the FTC. At the same time, Flo is said to have refrained from imposing conditions on the recipients of this data about their further use. Because users in the EU and Switzerland are also affected, Flo has also violated the Privacy Shield, which has now been repealed, and the Swiss-US Privacy Shield.

Knowledge about pregnancy is valuable for advertisers. You can offer pregnant women and their partners a variety of products and services with hefty margins. Above all, however, pregnancies and the following baby phase are one of the few occasions when consumers are particularly receptive to switching to high-margin branded products.

Comparison with the FTC Both companies have negotiated a settlement with the FTC. Flo should undertake not to lie to his customers about data protection and to inform those already affected about the data protection breach. In addition, Flo should instruct his business partners to delete all health data of Flo users.

Everalbum should delete the facial data extracted from the customer data and also all algorithms trained with it. At the same time, Everalbum should now really delete the files uploaded by former customers. The company also undertakes not to lie to customers about the use of their data. And should Everalbum ever be active in the consumer market again, it must obtain express consent before it collects biometric data.

Should the comparisons become final, violations could result in fines of up to 43. 280 US dollars per violation (approximately 35, 500 Euro). The FTC cannot impose penalties under US law for initial violations. First of all, the FTC will give everyone days to comment on the draft settlement.

Draft settlement with Flo Health, Inc., Az. 1923133 Draft comparison with Everalbum, Inc. , Az. 1923172 (ds)

Pocket-lint Best of CES 2021 Awards: The 15 top gadgets, TVs, laptops and more

(Pocket-lint) – The last 12 months or so have been unlike any other and that has had a profound affect on this year’s CES.

Being virtual-only for the first time, it meant we couldn’t tread the halls of the world’s largest trade show as we usually do, and therefore didn’t get to see as many products in the flesh.

But, we won’t let that stop us from giving you our rundown of the products we think will excite most in the coming year – the announcements from CES 2021 that you should keep an eye on.

This therefore is our list of the best tech launched during a quite unique CES.

Pocket-lint

Acer Chromebook Spin 514

The latest Chromebook Spin is the first to adopt AMD Ryzen processing, which should balance great performance with decent battery life.

It is well-made, in anodised aluminium and with a 360-degree hinge to turn it into a tablet. It also has a healthy amount of ports for great connectivity.

  • Acer Chromebook Spin 514 (2021, AMD) initial review: Versatility is its charm
Pocket-lint

Acer Predator Triton 300 SE

A gaming laptop that doesn’t really look like one, the Acer Predator Triton 300 SE comes with a 14-inch 1080p display that sports an impressive 144Hz refresh rate.

It also has the cooling systems synonymous with gaming PCs, yet will suit college or the workplace as equally well.

  • Acer Predator Triton 300 SE initial review: The everyday gamers’ laptop
Arlo

Arlo Touchless Video Doorbell

In these days of Covid-19 transmission and social distancing, Arlo has devised a doorbell that doesn’t need to be pressed to alert occupants.

The Arlo Touchless Video Doorbell uses AI and motion sensing to judge when someone is coming to the front door (rather than just wandering by), whereby it will sound the chime without needing any physical contact. An alert also tells the visitor that it has “rung” so there’s no confusion.

  • Arlo announces Touchless Video Doorbell, cutting down on COVID risk
Denon

Denon Home Sound Bar 550

No only does the Denon Home Sound Bar 550 sport four 55mm dribers, two 19mm tweeters and three bass radiators, it can be expanded with optional other Denon Home speakers to make for a complete home cinema solution.

It’s all wrapped up in a neat package too. And Denon Heos compatibility means it can sit at the heart of a multiroom setup with ease.

  • Denon’s Home Sound Bar 550 all-in-one soundbar is here to boost your TV’s audio
Gigabyte Aero 15 OLED

Gigabyte Aero 15 OLED

The Gigabyte Aero 15 OLED is rather unique in gaming laptop terms as it comes with a 1080p HDR AMOLED panel rather than traditional LCD.

That means it will present images with superb black levels and great, accurate colours. While HDMI 2.1 support enables it to feed the latest TVs too.

  • Gigabyte’s Aero and Aorus laptops come with RTX 3080 and OLEDs
JBL

JBL Tour One

JBL is well known for its fun and funky headphones, but the Tour One over-ears take it in a new direction. They are aimed at the same market as the Bose QC 35 II and Sony WH-1000XM4 – commuters, business types and travellers.

That means they have an unassuming design and adaptive noise cancelling tech talents. And there is up to 50 hours of playback time on the battery to boot.

  • JBL Tour One over-ears and Tour Pro+ TWS earbuds take aim at Bose and Sony
Lenovo

Lenovo Yoga AIO 7

This Lenovo all-in-one desktop PC comes with a 4K display that can be rotated at the touch of a button. That gives a more suitable aspect ration for looking at social media videos or browsing the web.

It’s no slouch in the computing stakes neither, with the ability to be spec’ed up to an AMD Ryzen 7 4800H Processor paired with Nvidia GeForce RTX 2060 GPU.

  • Lenovo’s Yoga AIO 7 all-in-one has a rotating 27-inch display
LG

LG G1 OLED TV

LG’s 2021 OLED TV range will be topped by a new version of its 4K G1 Gallery TV – a super slim panel that can sit almost flush against a wall.

As well as gorgeous looks and picture performance, the G1 also comes with webOS 6.0 and a new version of its Alpha 9 processor with even more AI skills. Plus, Google’s Stadia cloud gaming service will be playable on the new TV without the need for a separate Chromecast.

  • LG announces new, more efficient G1 OLED TV series, updates to C1 series
Microsoft

Microsoft Surface Pro 7 Plus

The Microsoft Surface Pro 7 Plus expands on its immediate predecessor with renewed internal hardware.

It comes with a larger battery, removable SSD storage and upgraded 11th Gen Intel Core processing. The front and rear cameras are also upgraded, with 1080p video capabilities. Nice.

  • Microsoft’s Surface Pro 7 Plus has longer battery life and a removable SSD
Panasonic

Panasonic JZ2000 OLED TV

Pansonic’s flagship OLED TV for 2021 adds HDR 10+ Adapative tech to the brand’s already long list of impressive features.

HDR 10+ Adaptive not only gives you scene by scene adjustments for HDR content, it adjusts it based on your room’s ambient lighting. Add that to Dolby Vision IQ and Filmmaker Mode and you have a cinema standard set.

  • Panasonic JZ2000 OLED TV is company’s 2021 flagship and spec’ed for next-gen gaming
Razer

Razer Blade 15

Not only can the latest iteration of the Razer Blade come with new Nvidia GeForce RTX graphics cards – even spec’ed up to the RTX 3080 – it gives you the option of a 4K display with a 165Hz refresh rate.

Even the base model has a 144Hz 1080p display – great at 15-inches. And a 4K OLED option is available too.

  • Razer reveals Blade 15 and 17 laptops with 360Hz screens and next gen Nvidia RTX GPUs
Samsung

Samsung HW-Q950A

Samsung has a couple of high-end soundbars coming in 2021, with the HW-Q800A (pictured) adding Apple AirPlay 2 to an impressive feature set.

However, it is the Samsung HW-Q950A system with its staggering 11.1.4 channel setup that really grabs our attention. The separate, wireless rears now come with side-firing speaker units as well as up-firing for truly all-encompassing audio.

  • Samsung’s 2021 soundbars include an 11.1.4-channel beast
Samsung

Samsung JetBot 90 AI+

The latest Samsung JetBot vacuum is not only packed with sensors, including Lidar, it comes with a charging dock that can extract all the dust and waste.

That way, you never have to empty the cleaner itself, with plenty of storage in the “bin” to only need your attention every “couple of months”.

  • Samsung JetBot 90 AI+ has a messy name, but promises to smartly clean your home
Samsung

Samsung Q900A Neo QLED TV

Samsung has embraced Mini LED for its top-of-the-range QLED TVs this year and its Q900A is an 8K flagship worthy of the title.

It has “Infinity One” design to almost eradicate the bezel, while Object Tracking Sound (OTS) Pro audio ensures the aural experience perfectly matches the movement on screen.

  • Samsung embraces Mini LED for 2021 8K and 4K Neo QLED TV range
Sony

Sony Bravia XR Master Series A90J

Sony’s latest sets have switched from Android TV to the more recent Google TV smart system, and they come with exclusive access to the brand’s new Bravia Core movie streaming service which provides 4K Blu-ray quality versions of films.

There is also a new Cognitive Processor XR tech inside that replicates the way a human brain sees images to perfect any flaws. The 4K A90J is our pick of the bunch.

  • Sony’s latest Bravia XR TVs are designed to more closely replicate what you see and hear

Writing by Rik Henderson.

CD Projekt Reveals Its Cyberpunk 2077 Roadmap For 2021

(Image credit: CD Projekt Red)

It’s been a while since we’ve heard anything on CD Projekt Red’s Cyberpunk 2077, much less from the company. Today that changed as the co-founder of the CD Projekt Red, Marcin Iwiński, has released a short video on what has transpired since its release and what the company is planning to do to win back all of the goodwill that has been lost.

Several factors lead to the demise of Cyberpunk 2077 on the previous generation of consoles, and Marcin Iwiński lays that all out. It’s basically an oral timeline of the events. Most of these were things that many of us speculated on, but hearing it again and officially does carry weight. He states that it was the choice of the management team to release the game, not of the developers. Marcin Iwiński provides a roadmap of what we can expect for the future of Cyberpunk 2077. 

As previously mentioned, two major updates are being released for Cyberpunk 2077, and the first one is being released 10 days from now. The second update will be larger than the first and will follow in February 2021.

The next-generation updates for both the PlayStation 5 and Xbox Series X|S are still in the works. However, there isn’t a specific date of when we can expect to see those. As you’d imagine, CD Projekt Red is busy working on the upcoming patches that will hopefully resolve many of the outstanding issues with the game.

A visual roadmap was also provided, and you can see that below. Take note that the free DLC is ahead of the free next-generation console update. This also means that the next-gen update won’t arrive until after the second half of 2021, confirmed by Marcin Iwiński. A decision that I feel should be reversed, especially since those playing Cyberpunk 2077 are doing so via backward compatibility and aren’t able to take advantage of the next-gen hardware.

(Image credit: CD Projekt Red Cyberpunk 2077 Roadmap)

A more detailed FAQ that addresses CD Projekt’s plans can be found here.

That said, It’s clear that the company hasn’t given up on Cyberpunk 2077 and has committed to resolving the issues while attempting to win back the trust that has been lost. This follows a rocky launch for the game; while Cyberpunk 2077 went on to sell 13 million copies, all went downhill after reports of the games’ performance and numerous issues appeared. Shortly after this, PlayStation, Xbox, and several other retailers starting offering refunds to those who requested them and even resulted in the game being pulled from the PlayStation Store. At the same time, Microsoft went on to add disclaimers onto its Microsoft Store to warn and caution those looking to purchase the game.

While the company has a long road ahead of them, It is good to see they’re committed to course-correcting the problems that ultimately let them into this situation. After the updates are released, what the gaming community does remains to be seen. As for myself, I shelved my playthrough of Cyberpunk 2077, but I am eager to return to see the improvements once the two larger updates are released. As those waiting to play the next-gen versions on their shiny new PS5’s and Xbox Series X|S consoles, they’re in for a much longer wait.