(Telecompaper) ZTE brand Nubia has launched its latest flagship gaming smartphone series in China, touting the performance standards, thermal system, display technology and battery size of the two new devices...

Spotify heeft er in het derde kwartaal 14 miljoen maandelijks actieve gebruikers bijgekregen, waarmee het totale aantal luisteraars wereldwijd op 640 miljoen kwam, een stijging van 11 procent ten opzichte van een jaar eerder...

Vodafone Group heeft het budget voor zijn lopende aandeleninkoopprogramma verhoogd met EUR 20 miljoen, tot een totaal van EUR 520 miljoen. De aandeleninkoop is in augustus begonnen en zal deze maand worden afgerond, aldus de operator.

(Telecompaper) Singtel saw strong EBIT growth of 27 percent year-on-year to SGD 738 million in fiscal first half to September...

(Telecompaper) Arelion said it has expanded its partnership with Netscout to improve the carrier's DDoS attack mitigation capabilities...

There are plenty of options for internet service providers in Gulfport. Here are CNET’s top picks.

Fayetteville residents can enjoy speedy internet plans offered by a bunch of different providers. These are the top options you should consider.

Commentary: The base iPhone still lacks an always-on display, but I hope Apple changes that with the iPhone 17.

Het vast-mobiel convergentieverhaal krijgt vorm in de VS met de aankondiging van de nieuwe breedbandstrategie van Verizon, terwijl AT&T en T-Mobile stappen zetten op de glasvezelmarkt. Op de jaarlijkse producttop van Qualcomm heeft de chipmaker hoge verwachtingen van zijn Oryon CPU, ondanks tegenstand van Arm...

This report provides insights into usage of customer service apps from telecom providers. We report on the service apps for the following brands: Ziggo, Vodafone, hollandsnieuwe, KPN, Simyo, Odido, Simpel and Ben. Data is from August 2024.

(Telecompaper) Charter Communications said that its Spectrum has promoted Elena Ritchie to the position of senior vice president of video. In her new role, Ritchie will advance the company's video strategy, including video experience, hardware and software architecture and engineering, and product and digital...

(Telecompaper) Canadian vendor Vecima Networks has announced the successful completion of a first-phase linear ad insertion deployment for US fibre and IPTV carrier Hotwire Communications. The first phase introduces linear parity ad insertion, enabling zonal ad placements in IPTV streams. In the next phase,...

(Telecompaper) Swedish satellite broadband provider Forsway has announced a development funding contract from the European Space Agency (ESA) with support from the Swedish National Space Agency (SNSA). Under the Xtend 5G project, Forsway will build a next generation 5G non-terrestrial network (NTN) two-way/hybrid...

Viaterra’s Holeshot Pro is a sporty glove that offers a hybrid between race looks, good protection and street-friendly comfort.

From a distance, these look a lot like a sporty, track-oriented glove, especially if you go for one of the coloured versions, like the blue ones here. But take a closer look and you’ll see that a significant portion uses a mesh construction for better breathability. The top of the thumb and the first three fingers are all mesh, with some soft rubber protectors. The pinky finger gets a leather panel sewn onto the mesh to protect against abrasion, as this is a common impact area in a crash. The top of the glove around the knuckle area is all leather, and there’s another patch of leather above the wrist as well. The entire palm is leather and there’s a high-grip panel below the fingers. All the leather used is perforated for better breathability.

Protection levels aren’t as high as those of a full-gauntlet race glove, but they’re good nevertheless. You’ll get Knox scaphoid armour for the palms, as well as some armour for the ulna bone on the outside of your wrist. For street gloves, this is more than sufficient, but you won’t find things like a bridged pinky finger or externally stitched seams here, although Viaterra offers those in its top Grid 3 full-gauntlet glove.

The Holeshot Pro gloves have touchscreen-sensitive leather patches on the thumb and index finger. The tops of the fingers also get reflective elements to improve nighttime visibility. The wrist closure is secured by a single velcro strap, and they’re easy to get on and off. The overall fit is on the snug side, especially in the knuckle region. The gloves break in over time, but the fit is sporty; if you want something more relaxed, you’ll want to look elsewhere.

I like the balance of sportiness and usability the Holsehot Pro packs in for life in the city, and the price is worth what you’re getting.

Where: viaterragear.com
Price: Rs 4,299

Also See: Viaterra Holeshot gloves review

Viaterra Munro custom fit pants review

Hero’s Xpulse 200 4V has been updated, and it’s offered in two variants: Standard and Pro. As the name suggests, the Pro is essentially the erstwhile Rally Edition, and it’s the more extreme version of an already capable off-road motorcycle. It is also available with a set of optional Maxxisknobbies that you see on our test bike. Hero has given the Xpulse 200 4V Pro some new features this year, and I took this motorcycle out in its natural habitat to find out what it’s like.

Hero has made some noticeable changes to the 2024 Xpulse range, which includes new reinforced knuckle guards, new switchgear, revised footpeg position, a new projector LED headlamp, a USB charging socket and ABS modes. The all-new headlamp is significantly brighter and incorporates an all-new Daytime Running Lamp design, making the Xpulse appear slightly more upmarket.

Unique to the Xpulse Pro is a new rally-styled windshield that is 60mm taller than before. The rally visor deflects wind well on the road. All in all, the new changes are a welcome addition and will improve the overall usability of this motorcycle. As before, the Pro variant towers over everything else on the road and stands tall while looking purposeful. Its size is deceptive, and many onlookers assume it is a motorcycle with a much larger capacity.

The Xpulse continues to be powered by a 199cc, oil-cooled motor that produces 19hp at 8,500rpm and 17.35Nm at 6,500rpm. What has improved is that with its OBD2 update, the engine now needs to be serviced every 6,000km instead of the 3,000km. Due to its easy power delivery, this motor continues to perform adequately, and is a boon to use for inexperienced off-road riders. At 161kg, the Pro variant is only 2kg heavier than its standard counterpart, which isn’t too bad given all the added hardware.

While the knobby tyres provided excellent grip, the engine lacked the power to overcome it. So sliding this motorcycle was not as easy as it is on ADVs that sit in a higher segment. What helps its case is that you will never find yourself running out of grip, and the Xpulse Pro keeps its cool even when climbing up sections with loose surfaces. While I still wish for more power, I have also come to enjoy its underpowered and calm nature on such tricky trails.

The Xpulse Pro is a challenge to ride on the tarmac if you choose the Maxxistyres – they are road legal, but are also zero-compromise knobbies built for off-road. Grip itself is fine, but the tyres feel scary when the bike is leaned over and they also make a loud, constant droning noise. The tyres also get unsettled over road irregularities and expansion joints can change the bike’s course at any given moment. On the normal Ceats, the bike would be much nicer, but you’ll still need to live with the very tall seat height – we’ll get back to that.

However, when they hit the dirt, these tyres come into their elements and provide an incredible amount of grip. Compression and rebound damping can be dialled in on the adjustable fork, and the owner’s manual has multiple setting recommendations for various riding situations and these settings are a good starting point from where you can tweak the set-up to your liking.
My biggest challenge was the 891mm seat height, which can take getting used to and initially be a little daunting. Mind you, this is with the stock seat and going for the optional rally style bench seat will take that number above 920mm.

The added height makes the motorcycle feel sluggish and more top-heavy, and this is where the humble engine’s limits become more apparent. However, in time, I’ve gradually gotten more comfortable with its size, and wrestling it off-road has become easier as you go. What has helped is the new footpeg positioning along with the handlebar risers that allow riders to get a better grip and find a more suitable position while standing.

Hero’s Xpulse 200 4V is a competent machine, and the Pro variant makes it even more unstoppable. That being said, it takes a certain skill level to get the most out of this bike. The suspension is best suited for high-speed off-roading. Shorter, or lesser skilled riders might be better off with the standard Xpulse for slower-speed trails. Either way, the updated features do a great job of uplifting the overall experience.

It is worth noting that all of the above-mentioned additions have come at a mild price bump of Rs 3,000, which sounds like a sweet deal. All in all, the Xpulse 200 4V Pro is an excellent alternative to the standard variant and costs Rs 8,000 more, which, given its credentials, sounds too good to be true. The Pro variant is an easy recommendation for anyone skilled enough to dive deeper into the off-road genre of motorcycling.

Also see: 2024 Yezdi Adventure review: Incremental changes
 

Viaterra’s Holeshot Pro is a sporty glove that offers a hybrid between race looks, good protection and street-friendly comfort.

From a distance, these look a lot like a sporty, track-oriented glove, especially if you go for one of the coloured versions, like the blue ones here. But take a closer look and you’ll see that a significant portion uses a mesh construction for better breathability. The top of the thumb and the first three fingers are all mesh, with some soft rubber protectors. The pinky finger gets a leather panel sewn onto the mesh to protect against abrasion, as this is a common impact area in a crash. The top of the glove around the knuckle area is all leather, and there’s another patch of leather above the wrist as well. The entire palm is leather and there’s a high-grip panel below the fingers. All the leather used is perforated for better breathability.

Protection levels aren’t as high as those of a full-gauntlet race glove, but they’re good nevertheless. You’ll get Knox scaphoid armour for the palms, as well as some armour for the ulna bone on the outside of your wrist. For street gloves, this is more than sufficient, but you won’t find things like a bridged pinky finger or externally stitched seams here, although Viaterra offers those in its top Grid 3 full-gauntlet glove.

The Holeshot Pro gloves have touchscreen-sensitive leather patches on the thumb and index finger. The tops of the fingers also get reflective elements to improve nighttime visibility. The wrist closure is secured by a single velcro strap, and they’re easy to get on and off. The overall fit is on the snug side, especially in the knuckle region. The gloves break in over time, but the fit is sporty; if you want something more relaxed, you’ll want to look elsewhere.

I like the balance of sportiness and usability the Holsehot Pro packs in for life in the city, and the price is worth what you’re getting.

Where: viaterragear.com
Price: Rs 4,299

Also See: Viaterra Holeshot gloves review

Viaterra Munro custom fit pants review

Hero’s Xpulse 200 4V has been updated, and it’s offered in two variants: Standard and Pro. As the name suggests, the Pro is essentially the erstwhile Rally Edition, and it’s the more extreme version of an already capable off-road motorcycle. It is also available with a set of optional Maxxisknobbies that you see on our test bike. Hero has given the Xpulse 200 4V Pro some new features this year, and I took this motorcycle out in its natural habitat to find out what it’s like.

Hero has made some noticeable changes to the 2024 Xpulse range, which includes new reinforced knuckle guards, new switchgear, revised footpeg position, a new projector LED headlamp, a USB charging socket and ABS modes. The all-new headlamp is significantly brighter and incorporates an all-new Daytime Running Lamp design, making the Xpulse appear slightly more upmarket.

Unique to the Xpulse Pro is a new rally-styled windshield that is 60mm taller than before. The rally visor deflects wind well on the road. All in all, the new changes are a welcome addition and will improve the overall usability of this motorcycle. As before, the Pro variant towers over everything else on the road and stands tall while looking purposeful. Its size is deceptive, and many onlookers assume it is a motorcycle with a much larger capacity.

The Xpulse continues to be powered by a 199cc, oil-cooled motor that produces 19hp at 8,500rpm and 17.35Nm at 6,500rpm. What has improved is that with its OBD2 update, the engine now needs to be serviced every 6,000km instead of the 3,000km. Due to its easy power delivery, this motor continues to perform adequately, and is a boon to use for inexperienced off-road riders. At 161kg, the Pro variant is only 2kg heavier than its standard counterpart, which isn’t too bad given all the added hardware.

While the knobby tyres provided excellent grip, the engine lacked the power to overcome it. So sliding this motorcycle was not as easy as it is on ADVs that sit in a higher segment. What helps its case is that you will never find yourself running out of grip, and the Xpulse Pro keeps its cool even when climbing up sections with loose surfaces. While I still wish for more power, I have also come to enjoy its underpowered and calm nature on such tricky trails.

The Xpulse Pro is a challenge to ride on the tarmac if you choose the Maxxistyres – they are road legal, but are also zero-compromise knobbies built for off-road. Grip itself is fine, but the tyres feel scary when the bike is leaned over and they also make a loud, constant droning noise. The tyres also get unsettled over road irregularities and expansion joints can change the bike’s course at any given moment. On the normal Ceats, the bike would be much nicer, but you’ll still need to live with the very tall seat height – we’ll get back to that.

However, when they hit the dirt, these tyres come into their elements and provide an incredible amount of grip. Compression and rebound damping can be dialled in on the adjustable fork, and the owner’s manual has multiple setting recommendations for various riding situations and these settings are a good starting point from where you can tweak the set-up to your liking.
My biggest challenge was the 891mm seat height, which can take getting used to and initially be a little daunting. Mind you, this is with the stock seat and going for the optional rally style bench seat will take that number above 920mm.

The added height makes the motorcycle feel sluggish and more top-heavy, and this is where the humble engine’s limits become more apparent. However, in time, I’ve gradually gotten more comfortable with its size, and wrestling it off-road has become easier as you go. What has helped is the new footpeg positioning along with the handlebar risers that allow riders to get a better grip and find a more suitable position while standing.

Hero’s Xpulse 200 4V is a competent machine, and the Pro variant makes it even more unstoppable. That being said, it takes a certain skill level to get the most out of this bike. The suspension is best suited for high-speed off-roading. Shorter, or lesser skilled riders might be better off with the standard Xpulse for slower-speed trails. Either way, the updated features do a great job of uplifting the overall experience.

It is worth noting that all of the above-mentioned additions have come at a mild price bump of Rs 3,000, which sounds like a sweet deal. All in all, the Xpulse 200 4V Pro is an excellent alternative to the standard variant and costs Rs 8,000 more, which, given its credentials, sounds too good to be true. The Pro variant is an easy recommendation for anyone skilled enough to dive deeper into the off-road genre of motorcycling.

Also see: 2024 Yezdi Adventure review: Incremental changes
 

Ola Electric will begin delivering its Gen 3 platform-based electric scooters by January 2025 instead of the previously expected time frame of mid-March to April 2025.

1. New motor architecture promises more torque
2. Gen 3 platform will bring in new S2, S3 models
3. S3 will have maxi-scooters, premium offerings 

Gen 3 Ola Electric platform details

Ola is speeding up the introduction of new models to cater to both mass and premium category customers as two-wheeler adoption has increased from 16.1 percent in June 2024 to 21.4 percent in September 2024. This is particularly true when it comes to Rs 1 lakh mass-market scooters in Uttar Pradesh, Rajasthan, Karnataka and Maharashtra.

In a regulatory filing following the Q2 FY25 results investor call, Ola Electric said that it will begin delivering S1 Gen 3 products in January next year, ahead of schedule.

Ola had previously said that as a part of its Gen 3 architecture, it will introduce five additional scooters, expanding its range beyond the existing S1 series with the introduction of two new sub-brands, S2 and S3.

The S2 brand will introduce three models: a City model for urban commuting, a Tourer for longer distances, and a sports model for performance enthusiasts. The S3 sub-brand plans to target the premium segment with two maxi-scooters, the Grand Adventure and Grand Tourer, which will prioritise luxury and performance.

The Gen 3 model would include an integrated battery, magnetless motor, and electronics within the chassis, Ola said. Compared to previous models, this novel design is expected to improve performance by 26 percent and reduce costs by over 20 percent.

Magnetless motors use magnetised electrical coils instead of permanent magnets, resulting in greater torque. According to a senior company official, the Gen 3 platform, which is part of Ola's vertical integration strategy, is expected to be scalable and use 4,860 lithium-ion cells manufactured at its Gigafactory in Tamil Nadu by the first quarter of FY26.

Ola Electric has a share of around 30 percent in the electric two-wheeler market, and plans to expand its distribution network to 2,000 stores by March 2025, up from 782 currently. The company further plans to expand its product offering with the Roadster series of electric motorcycles, with deliveries beginning in Q4 FY2025.

Ola also intends to introduce 20 new products, with at least one new product being introduced quarterly, it said in a regulatory filing. Ola’s electric scooters currently start from Rs 75,000 (ex-showroom, India).

The company admitted to having capacity issues at its service centres, and added that it has cleared a majority of the backlog with approximately 80 percent of service requests now handled “within a single day.”

To improve service delivery, the company launched the 'Network Partner Programme' in September, which now has over 1,000 partners. By the end of 2025, Ola Electric intends to expand its network to 10,000 sales and service partners.

“The Network Partner Programme will enhance the benefits of our direct-to-consumer (D2C) network, thereby increasing EV penetration in India. It requires low capital investment from partners and can be rapidly scaled,” an official from the company noted.

Also See: Ola retains market lead in October EV sales

The project will mark the maiden collaboration between Sunny Deol and Aamir Khan, who have previously worked with Santoshi on separate projects

At the second edition of Delicious Design Project by Glenmorangie, designers Shivan & Narresh’s hat-tip to scotch whisky in the form of bespoke couches

Any luxury project could be marketed as BIO as a sales gimmick, even when they may not necessarily refer to luxury at all

Gen Z and millennials prefer technology-integrated and community-oriented accommodations in cities across India

The Q3 will be the fifth Audi to be locally produced, with the Audi A4, Audi A6, Audi Q5 and Audi Q7, at the brand’s plant in Aurangabad, Maharashtra

Selfie Parotta Coaching Centre helps chefs fluff up the flakiest parottas to soak up the perfect amount of salna

The cafes will serve millet-based food products and also have these on sale, says Kerala Agriculture Minister P. Prasad

The hampers will have handmade, homemade products made by the women entrepreneurs in Thiruvananthapuram

The menu, featuring 100 dishes, is a diverse mix of cuisines with dishes like spanakopita, Thai curry, muttai 65 and avakkai urulai

1. NASA's Jet Propulsion Lab laying off 5% of its workforce  Space.com
2. JPL Workforce Update  NASA Jet Propulsion Laboratory
3. NASA’s JPL to cut 325 positions amid budget tightening  The Pasadena Star-News
4. NASA's Jet Propulsion Lab announces hundreds of layoffs: 'Painful but necessary'  Fox Business

1. Fantasy football rankings Week 11: Sleepers, projections, starts, Russell Wilson, Calvin Ridley and more - The Athletic  The New York Times
2. Start 'Em, Sit 'Em Quarterbacks For Fantasy Football Week 11  Sports Illustrated
3. Week 11 Waiver Wire: Top Pickups, Drops Likely Available After Reviewing Box Scores  Bleacher Report
4. Fantasy Football Week 11 Defense (DST) Rankings and Streamers  NBC Sports
5. Fantasy plays: Players to start and sit for NFL Week 11  The Associated Press

1. Who is Mike Huckabee, the evangelical, pro-settlement envoy to Israel?  Al Jazeera English
2. Mike Huckabee once said that ‘there’s really no such thing as a Palestinian’  CNN
3. Trump nominates Mike Huckabee for US ambassador to Israel  Fox News
4. Trump Picks Mike Huckabee, Former Arkansas Governor, for Ambassador to Israel  The New York Times

Property owners may face serious legal and financial ramifications if they fail to pay their property taxes. Therefore, timely paying such taxes is necessary to continue taking advantage of the municipal amenities. Owners must take immediate action if a property … Continue reading →

Before purchasing, buyers should confirm that a property is free from legal issues. They must comprehend ideas from the Code of Civil Procedure (CPC), such as “Attachment of Property,” to do this. Attachment is the legal term for taking possession … Continue reading →

Godrej Properties Ltd has announced the acquisition of a roughly 46-acre land parcel in Indore. According to the company’s July 31 regulatory filing, the development on this land will mostly consist of plotted residential units and offer an estimated saleable … Continue reading →

Are you trying to find a cozy haven with a view of the city skyline? The desire for luxurious living is growing, and renowned builders like Nitara Projects are fostering this desire by offering strong, innovative, and tastefully designed premium … Continue reading →

However, the Delhi Development Authority (DDA) is making a groundbreaking shift in how it handles property documentation. Starting in September 2024, buyers will receive their flat documents in a sophisticated, customized folder. This change comes after concerns raised by Lieutenant … Continue reading →

Hi there! As we light up our homes and hearts to welcome the joyous festival of Diwali, we want to extend our heartfelt wishes to you and your family for a season filled with health, happiness, and prosperity. ????✨ In … Continue reading →

Summary: The abundance of X.509 certificate authorities who already perform identity proofing for businesses provides a rich resource that can be leveraged to boot the verifiable data ecosystem.

When you used a verifiable credential to prove something about yourself, the verifier can know cryptographically: (1) the identifiers for the issuer, (2) the credential hasn't been tampered with, (3) the credential was issued to you, and (4) the credential hasn't been revoked. These four checks are important because their establish the fidelity of the data being transferred. They don't, however, tell them whether they can trust the issuer. For that, they need to take the issuer's decentralized identifier (DID) that they got from credential presentation and determine who it belongs to.

At the most recent Internet Identity Workshop, Drummond Reed gave a session on how X.509 certificates could help with this. The first step, like always, is to resolve the DID and retrieve the DIDDoc that associates keys and endpoints with the DID. The endpoint can be an HTTP server and, of course, should have an X.509 certificate providing TLS security. That certificate, at the very least, has a a domain name to bind that to the certificate's public key. It can, if you pay for the feature, also include information about the entity that applied for the certificate. The certificate authority proofs that information and is vouching for it when they sign the certificate.

The key to making the X.509 certificate useful for checking the provenance of a DID lies in one key change. X.509 certificates can contain and extended field called a Subject Alternative Name. This following figure shows how it can help.

In this figure:

1. The issuer (Attestor) creates the DID they will use to issue the certificate along with its associated DIDDoc, including an HTTP endpoint for DID verification.
2. Attestor applies for a X.509 certificate for that endpoint, including in the application the DID they created in (1).
3. The certificate authority does it's usual proofing of the application and issues a certificate that includes the DID in the Subject Alternative Name field.
4. The issuer creates a credential definition in the usual way that includes their DID and writes it to whatever Verifiable Data Registry their DID method dictates.
5. Attestor issues a credential to a holder (Alice) using that credential definition.
6. At some later time, Alice presents the credential to the verifier (Certiphi).
7. Certiphi resolves the DID to get the DIDDoc and retrieves the verfication endpoint from the DIDDoc
8. Certiphi retrieves the certificate for that endpoint¹.
9. Certiphi verifies the certificate by checking it's signature and ensures that the DID in the DIDDoc for the credential matches the one in certificate.²

The issuer's DID has now been tied in a verifiable way to whatever information is in the certificate. Provided the certificate includes information about the entity beyond the domain name, the verifier can use that information to determine whether or not the credential is authentic (i.e., issued by who the credential definition purports issued it). That might be all the evidence they need to determine whether to trust the entity. Certificate authorities could also issue verifiable credentials to the customer attesting the same verified claims—after all, it's one more product they can offer.

The benefit of doing issuer validation using X.509 certificates is that there are already many trusted X.509 certificate authorities in business who already do proofing of attributes about businesses. That's a huge chunk of the verifiable data ecosystem that doesn't need to be built because it can be leveraged. To make this work, digital certificate authorities would need to start offering to validate DIDs and include them in a certificate as a Subject Alternative Name. I don't discount that this will take some bureaucratic maneuvering. Certificate authorities will need to see a business opportunity. I'd love to see Digitcert or someone do a pilot on this.

Notes

1. Note that this step might be combined with the previous step if the Verifiable Data Registry is the same server as the endpoint, but that's not necessarily going to be the case for a number of reasons.
2. Note that this does not create a call back wherein Attestor can determine which credential was used, preserving the privacy of the presentation. Attestor does know one of its credentials has been presented to Certiphi. If this information leakage bothers you, then any web-based DID method is potentially a problem.

Tags: identity ssi decentralized+identifiers verifiable+credentials x.509

Summary: We know that LLMs hallucinate. And we know that we can overcome some of that problem with better prompts. But can LLMs provide references for their work? I conducted an experiment.

Recently my friend Scott Mace asked this on X in response to a post about the evolution of software and how LLMs will likely follow that same trajectory:

Yes, but how trustworthy will it be? Can I at least see the links it used to create its response?

From X
Referenced 2024-05-21T18:09:06-0400

The short answer is "no", but the real answer is a bit more nuanced because of how LLMs like ChatGPT work. First the short answer: LLMs don't understand what they're saying so they can't reference the material that it used to create a response. They don't work like that. They don't go out, do a bunch of research and then create a response. Instead lots (and I mean LOTS) of material is fed into the program that creates the model, a multi-dimensional matrix of word orders. Then when you ask a question ("give it prompt" in LLM-speak), it processes the question and generates text based on the probabilities of words in its model¹. There's no way it can satisfy Scott directly because the model doesn't—can't, as far as I know—include the references that it used to create the text because it's generating it on the fly from material that has been thoroughly blended together.

But, in fairness, that's not what people do most of the time either. If you asked me over lunch or at the end of a tech presentation to describe zero trust and its pros and cons, I'd start talking. I wouldn't start looking up things on the web and somehow weave them into text complete with references. I'd go look for references if you asked me to back up something I said. So, let's try that with ChatGPT 4o. I gave it the following prompt:

You are a writer for a website focusing on technology. Your specialty is security. Write a 150 word explanation of zero trust with three pros and three cons.

ChaptGPT answered with this text:

Zero Trust is a security model based on the principle of "never trust, always verify." Unlike traditional security models that assume everything inside the network is safe, Zero Trust assumes that threats can exist both inside and outside the network. It requires strict identity verification for every user and device attempting to access resources, regardless of their location.

Pros:

1. Enhanced Security: By continuously verifying users and devices, Zero Trust reduces the risk of breaches and unauthorized access.
2. Minimized Attack Surface: It limits access to only what is necessary, reducing potential entry points for attackers.
3. Improved Compliance: Helps meet regulatory requirements by ensuring strict access controls and logging all access attempts.

Cons:

1. Complex Implementation: Deploying Zero Trust can be complex and time-consuming, requiring a significant overhaul of existing systems and processes.
2. Increased Costs: The initial investment in technology and training can be high.
3. User Experience Impact: Continuous verification can lead to friction and inconvenience for users if not implemented smoothly.

Zero Trust is essential for modern cybersecurity, but it requires careful planning and resources to implement effectively.

That's pretty good. But what if we need some references to other material to back up the pros and cons? I asked ChatGPT to supply them:

Now repeat that task, but this time include references as hyperlinks to back up each pro and con.

ChaptGPT answered with this text:

Zero Trust is a security model based on the principle of "never trust, always verify." Unlike traditional security models that assume everything inside the network is safe, Zero Trust assumes that threats can exist both inside and outside the network. It requires strict identity verification for every user and device attempting to access resources, regardless of their location.

Pros:

1. Enhanced Security: By continuously verifying users and devices, Zero Trust reduces the risk of breaches and unauthorized access (CSO Online).
2. Minimized Attack Surface: It limits access to only what is necessary, reducing potential entry points for attackers (NIST).
3. Improved Compliance: Helps meet regulatory requirements by ensuring strict access controls and logging all access attempts (Gartner).

Cons:

1. Complex Implementation: Deploying Zero Trust can be complex and time-consuming, requiring a significant overhaul of existing systems and processes (Forrester).
2. Increased Costs: The initial investment in technology and training can be high (ZDNet).
3. User Experience Impact: Continuous verification can lead to friction and inconvenience for users if not implemented smoothly (TechRepublic).

Zero Trust is essential for modern cybersecurity, but it requires careful planning and resources to implement effectively.

That looks great! Nice references for each bullet. There's just one problem. All the links, except the NIST reference, are dead. I don't know if they're wrong, made up, or stale. I tried finding content on a few of the sites by searching and came up dry. As I heard Johannes Ernst say once, ChatGPT is a "large language model" not a "large fact model" and this bears that out.

Still, asking for references or evidence for statements is something people are going to want. So, I tried a different tack. This time I asked this:

Why do you say complex implementation is a problem for zero trust? Can you give me a few references on that I can read myself?

ChatGPT responded with this:

Implementing a Zero Trust security model can be challenging for several reasons:

1. Overall Complexity: Zero Trust requires a comprehensive understanding of your network's intricacies, including users, devices, applications, and data. This can involve significant changes to existing infrastructure, which can be disruptive and costly. Organizations need to be prepared for the extensive planning and resources required for successful implementation​ (Help Net Security)​​ (Enterprise Networking Planet​).
2. Legacy Systems: Many organizations have legacy systems that are not designed to operate within a Zero Trust framework. These systems might require different security measures or even complete replacement, adding to the complexity and cost (Help Net Security)​​ (Enterprise Networking Planet​)
3. Cultural Shift: Zero Trust is not just a technological shift but also a cultural one. It requires continuous verification and strict access controls, which can lead to user frustration and resistance if not managed properly. Ensuring user buy-in and minimizing disruption to workflows through training and communication is essential (Deloitte United States)​​ (Guidehouse).
4. Resource Intensive: Implementing and maintaining Zero Trust can put a strain on IT resources due to the need for continuous monitoring and management. The need for advanced security tools and ongoing updates further adds to the resource demands (Help Net Security)​​ (Enterprise Networking Planet​).
5. Stakeholder Alignment: Achieving buy-in from all stakeholders and aligning them with the Zero Trust principles is critical. This requires a coordinated effort to educate stakeholders, prioritize gaps, and ensure consistent understanding and application of Zero Trust principles across the organization (Deloitte United States)​​ (Guidehouse).

These challenges highlight the importance of a phased and well-planned approach to Zero Trust implementation, considering both technological and human factors. For more detailed insights, you can refer to articles from Help Net Security and Guidehouse.

Much better. The links in the bullets all work, but the ones at the end don't. The articles it references aren’t very detailed, so I wouldn’t say they’re stellar references, but at least there’s a pointer to outside material that discusses similar challenges. So, partial success.

I've found that when you're using ChatGPT to do research, treating it like a librarian and asking questions that follow up are the best way to gain confidence that the material is correct and find the supporting material, just as I did above. I'm sure you could wrap additional helper functions around an LLM to make getting references easier. But for now interrogation through chat is the best way to get comfortable with the results.

Notes

1. Yeah, this is really simplified and thus wrong, but it's directionally correct. For a better explanation, see What Is ChatGPT Doing … and Why Does It Work?.

Photo Credit: Older Man Talking to Robot Librarian from DALL-E (public domain) Prompt: draw me a rectangular picture of an older man talking with a robot librarian. Use earth tones.

Tags: genai llm chatgpt prompt+engineering

Sean Goedecke, Nov 13, 2024

I remember a phrase from some technical conference a number of years ago: "quality ships." If you ever wondered what this means, this article is for you. It describes what it is to 'shop' a software product, and the sorts of concerns the person responsible has in order to ensure the project ships. After all, the default status for any project is 'not shipped'. There will always be something that could be added, something improved. The idea is to get it in front of as many ideas as possible, deal with the issues, earn the confidence of management, and deliver the result. Via Ben Werdmuller.

Michael Taft and Marcia Segal from the American Folk Life Center, Library of Congress will be in Utah on October 13, 2004 to discuss the The Save Our Sounds project and related digital issues. This Fall Caucus program will be from 9:00 a.m. to 3:00 p.m. in room 3211 Wilkinson Center on the campus of Brigham Young University and is sponsored by CIMA, the Conference of Inter-Mountain Archivists. There will be no charge to the event and lunch will be on your own from 12:00 noon to 1:30 p.m.

A member of Utah's RSS project team asked this week, "what can I read to get up to speed about RSS?" The answer is visit RSS Winterfest! The two-day RSS Winterfest webcast takes place this coming Wednesday and Thursday, January 21-22. It offers a number of programs having direct application to governments planning RSS syndication projects.

What difference would it make to be able to unlock ocean data at scale? How would deploying hundreds of marine sensing platforms improve marine weather predictability and accuracy? A company named Sofar is answering some of those questions these days due to their capacity to use real-time data to improve ... [continued]

The post How Networks Of Ocean Sensors Can Improve Marine Weather Predictability appeared first on CleanTechnica.

Arches National Park in Utah recently announced that rangers are looking for comments on a proposed plan to deal with congestion. For over a decade, the National Park Service (NPS) has struggled to keep the park from becoming a gridlocked traffic mess as outdoor recreation has become more popular while ... [continued]

The post E-Bikes Could Solve A Big Problem For Arches National Park appeared first on CleanTechnica.

2024年11月8日、NPO法人知的資源イニシアティブ（IRI）は、7日に図書館総合展で開催されたLibrary of the Year 2024最終選考会の結果を発表しました。

選考の結果、大賞は沖縄県立図書館“Finding Okinawan Roots” Projectが選ばれました。また、会場投票によるオーディエンス賞も同時受賞しました。

Library of the Year 2024 大賞およびオーディエンス賞決定！（IRI, 2024/11/8）
https://www.iri-net.org/loy/library-of-the-year2024result/

続きを読む