All posts by Paul Stradling

Tech Tip – Using Microsoft’s Floating ‘Edge Bar’

The Edge Bar is a handy floating sidebar / mini (Bing) browser that comes with the latest version of Edge in Windows and makes searching and accessing email and other platforms faster and easier. Here’s how to enable and use it:

– Open Edge and click on the three dots (top right).

– Select ‘Settings’.

– Select ‘Edge bar’ in the left panel and click on ‘Open Edge bar’ on the right.

– Search for something with the Bing search engine at the top of the Edge Bar.

– Click on the bookmarks to platforms such as Outlook and LinkedIn shown on the right of the Bar (added by default) and add your own favourite website bookmarks there. To add them, click on the plus (+) button (right section of the Edge bar), enter the URL, and click on Add.

Sustainability : Tenfold Expansion In EV Chargepoints By 2030 Announced

The UK government’s Department for Transport has announced that it will soon be unveiling new plans for the tenfold expansion in the number of Electric Vehicle (EV) chargepoints in the UK by 2030.

Support To Create 300,000 Public EV chargepoints 

The Department for Transport has announced that its new plans, backed by £1.6 billion, under the Electric Vehicle Infrastructure Strategy, will support the UK market to reach 300,000 public electric vehicle (EV) chargepoints by 2030. This is the equivalent to almost 5 times the number of fuel pumps on UK roads today.

Investment 

The government says that £500 million will be invested in bringing competitively priced public chargepoints to communities across the UK. It is understood that this includes a £450 million Local Electric Vehicle Infrastructure (LEVI) fund, which will boost projects like EV hubs and innovative on-street charging, so those without driveways can still benefit from cleaner transport. Another aim of the new strategy is to make sure that the new chargepoints are distributed so that they can cover the entire country.

A pilot scheme for the LEVI fund has also launched, enabling local authorities to bid for a share of £10 million in funding to work with industry and boost public charging opportunities. LEVI funding also includes up to £50 million to fund staff to work on local challenges and public chargepoint planning so that development complements other zero emission forms of travel e.g., walking and cycling.

New Legal Requirements For Chargepoint Operators 

The government’s plans also incorporate new legal requirements for chargepoint operators so that EV drivers can pay easily by contactless, compare charging prices, and find nearby chargepoints via apps. A 99 per cent reliability rate will also be required at rapid chargepoints.

Private Sector 

The government is also keen to highlight how, coinciding with its own announcement, the UK’s most-used private sector charging network company, bp pulse, has made its own announcement of its plans to spend £1 billion on developing charging infrastructure in the UK, supporting hundreds of new jobs. It is thought that the private sector will need to play a key role in helping the country make the switch to electric and the UK’s most-used charging network.

Chargepoint operators have already committed to installing an additional 15,000 rapid chargepoints across England’s entire road network which should take the total to over 100,000 on-street chargepoints by 2025.

Easier Right Across The Country 

Prime Minister Boris Johnson said of the new plans: “We’re powering ahead with plans to help British people go electric, with our expanding charging network making journeys easier right across the country” and that clean transport will “create new high-skilled jobs for our automotive and energy sectors and ultimately secure more sustainable and affordable motoring for all”. 

Transport Secretary Grant Shapps added: “The scale of the climate challenge ahead of us all is well known, and decarbonising transport is at the very heart of our agenda” and “that’s why we’re ensuring the country is EV-fit for future generations by the end of this decade, revolutionising our charging network and putting the consumer first.” 

Concern 

Altough broadly welcoming the government’s announcement, the RAC’s head of policy, Nicholas Lyes, expressed some concerns, saying: “While the Government’s expectation of having 300,000 chargepoints available by 2030 might sound impressive, we are concerned that this is not going to be sufficient with drivers looking to switch to an electric vehicle en-masse ahead of the 2030 ban on the sale of new petrol and diesel cars. Additionally, accessibility standards and assistance for those without smartphone apps should also be part of the overall strategy.” 

What Does This Mean For Your Organisation? 

Concern about the UK’s EV charging network has long been cited as one of the main barriers to the growth and take-up of EV ownership in the UK. If this announcement of funding quickly materialises into real improvements in, and a widening of the network nationwide (along with public sector help), it could really boost EV take-up. As highlighted by the RAC, however, the 2030 ban on the sale of new petrol and diesel cars is looming very near and although ambitious-sounding, these latest plans may need to be dramatically scaled-up if an en-masse switch to EVs is possible in the allotted time. For now though, the announcement has showed that the idea is firmly on the government’s agenda, may act as a confidence booster for those looking at EV ownership soon, and is, of course good news in terms of moving the country towards its environmental targets. There is also the prospect that more jobs and innovation could also come out of the investment.

Tech News : Warning: Scam Aid To Ukraine Emails Circulating

The UK’s national fraud reporting centre, Action Fraud, says that it has received 196 reports of scam emails claiming to be raising funds for victims of the war in Ukraine.

Facebook Post  

In a Meta / Facebook post on 18 March, Action Fraud reported:

“We’ve received 196 reports about FAKE emails purporting to raise money for those affected by the crisis in Ukraine. Some of the emails even claim to be from Wladimir Klitschko.” 

Fake Websites Too 

ESET researchers have also reported seeing a number of fake websites showing images of soldiers and explosions and the flag of Ukraine, asking for aid donations but with no specific details of how the money will be used. ESET commented in tweet: “Cybercriminals have no shame. With no humanitarian organization and only generic purpose mentioned, scammers try to lure out money from people trying to help #Ukraine during the #war.”   

Advice  

The advice from Action Fraud is that if any suspicious emails are received, they should be forwarded to: report@phishing.gov.uk.  Also, the Charity Commission and Fundraising Regulator have published information online here to help the public to ‘give safely’ to registered charities and causes helping to support and protect people affected by the invasion of Ukraine.

Simple Checks  

The Charity Commission and Fundraising Regulator suggest that those looking to donate to causes working in Ukraine and neighbouring countries should make some simple checks before donating, such as:

– Check the charity’s name and registration number at www.gov.uk/checkcharity.

– Check to see if the charity is genuine before parting with any financial information, e.g. check online for details of the charity and/or contact them to ask about what work they’re doing and how funds are spent.

– Exercise caution when responding to emails or clicking on links within the emails.

– Look for the Fundraising Badge (the Fundraising Regulator’s logo) on charity fundraising materials. This is a sign that they fundraise in line with the Code of Fundraising Practice.

Helen Stephenson CBE, Chief Executive of the Charity Commission, said about donating causes helping the people of Ukraine: “We encourage everyone to follow our simple steps to check that their money gets to its intended cause. Donating to a registered charity is a good way to feel confident of that.”  

What Does This Mean For Your Business?  

Just as we saw with the pandemic, scammers will exploit any situation to extract money and sensitive, personal information from people. Situations where there is a strong emotional response and an urge to help and move quickly are ideal for scammers who rely people acting on emotional impulse and not checking or using critical thought or discussing their intentions with others who may alert them to the danger. Taking time to make simple checks, such as some basic online research can help ensure that money goes to those who need it rather than to fraudsters funding more crime. The advice is to be on the alert for fake emails and social-media posts from scammers looking to cash-in on the crisis in Ukraine, report and to delete and suspicious emails and make some basic checks before donating to any charity or organisation.

Featured Article : What is Lapsus$?

In this article, we look at the cyber-crime gang Lapsus$, how they operate and the details of some of their recent high-profile attacks.

Cyber-Crime Gang

Lapsus$ is reported to be a mostly teenage cyber-crime gang (hackers), mainly based in South America, yet with its alleged multi-millionaire teenage leader based in Oxford, UK. The gang, which typically uses ransomware and data extortion, has risen to prominence over the last year or so thanks to frequent attacks on major targets. Although some tech and security commentators have described them as inexperienced and amateurish, they have expanded their reach globally and created many costly problems for some large organisations. Much of the money reported to have been taken by them is likely to have come not just from extortion but also from taking over individual user accounts at cryptocurrency exchanges and draining cryptocurrency holdings.

Social Engineering 

Some online reports indicate that Lapsus$ Initially gains access to organisations prior to extortion through social engineering. This is reported to involve bribing and tricking employees at customer support call centres and help desks, for example. Microsoft, which was targeted by the group, wrote in a post that it had found instances where Lapsus$  “had successfully gained access to target organisations through recruited employees (or employees of their suppliers or business partners).” 

Telegram Group 

Lapsus$ is known to have a group of around 45,000 subscribers on Telegram (instant messenger channel) on which the hacking group members are known to be highly active. It is believed that the Telegram group and multiple other social media platforms have been used for recruitment since at least November 2021.

The Leader? 

It has been reported that the leader of  Lapsus$ is a 16-year-old boy based in Oxford who uses the hacking names “White” or “Breachbase”. It has also been reported (and alleged) that the autistic teenager has amassed a massive $14m (£10.6m) fortune (in cryptocurrency) from hacking!

Doxxed 

The teenage alleged leader’s identity as was revealed after he reportedly mismanaged the Doxbin website that he controlled and leaked the Doxbin data set to Telegram. This led angry customers of the site, which shares personal information about people, to retaliate by doxing him, i.e. publicly revealing personal information about him online. It has also been reported, however, that cyber-security researchers, e.g. Unit 221B, have been tracking the alleged leader of Lapsus$ and have been aware of his real identity for almost a year.

Father Unaware 

Following the doxing, it has been reported that White/Breachbase’s father was unaware of his son’s alleged involvement in hacking and that his father believed that extended periods spent on his computer was simply the result of his son playing video games.

Attacks So Far 

Some of those targeted and attacked by Lapsus$ are so far thought to include:

– Security company Okta. The attack in January, which allegedly involved a third-party contractor, is reported to have been a case where the data of (at worst) 366 of its clients may have been “viewed or acted upon”. News of the issue caused a 9 per cent fall in the company’s shares.

– Microsoft, which reported that the group had only gained limited access after compromising a single account. Microsoft, which calls the Lapsus$ group DEV-0537, has published an extensive post about their activities and methods here: https://www.microsoft.com/security/blog/2022/03/22/dev-0537-criminal-actor-targeting-organizations-for-data-exfiltration-and-destruction/

– Samsung, which recently confirmed that the hacking group had breached its security and stolen code relating to the operation of Galaxy smartphone devices.

– Nvidia (US GPU giant). It was reported that Lapsus$ broke into NVIDIA’s internal network, stole sensitive data (from hashed login credentials to trade secrets) and then leaked NVIDIA’s official code signing certificates.

– Ubisoft (a French gaming publisher) has also been targeted.

Recent Arrests 

Following an investigation, it has been reported that City of London Police have now arrested seven teenagers over their suspected connections with the Lapsus$  hacking group. It is not clear, however, whether this included the suspected 16-year-old leader.

What Does This Mean For Your Business? 

It is shocking that a group of teenagers apparently on their computers in their bedrooms at home may be behind some high-profile extortion crimes against major organisations, as well as taking over cryptocurrency accounts, amassing vast digital wealth in the process. In this case, although the attacks may have exposed some technical security holes in company defences, the group seems mostly to have relied upon (according to Microsoft) using social engineering, e.g. recruiting and bribing relatively low-level insiders. This is difficult for businesses to defend against, and it highlights the importance of monitoring and training about cyber threats in companies. Although some arrests have now been made, the continued existence of a huge subscriber base on Telegram, and details stolen in previous attacks means that the danger may not be over, and others may copy the gang’s methods or replace lost members.

Tech News : EU To Limit Power Of Large Tech Platforms

The EU Parliament, Council negotiators and lawmakers have agreed new rules under the Digital Markets Act (DMA) that will limit the market power of the big technology companies and open up the market for competitors.

What Is The Digital Markets Act? 

The Digital Markets Act (DMA) from the European Commission has been designed to ensure a higher degree of competition within the European Digital Markets, by preventing large companies from abusing their market power and by allowing fresh players to enter the market. The idea is to create more of a level playing field for businesses which the EC believes could help to foster innovation, growth, and competitiveness.

Applies To Gatekeepers 

The DMA will apply to “gatekeeper” businesses, and the EC has another initiative called the Digital Services Act (DSA) which will be used help protect the rights of users of digital services.

Who / What Are The “Gatekeepers”? 

The “gatekeepers” that the DMA rules will apply to are the companies providing “core platform services” who are “most prone to unfair business practices.” Gatekeepers, such as social networks or search engines, are “digital platforms with a systemic role in the internal market that function as bottlenecks between businesses and consumers for important digital services.” These companies are defined by the EU as having a market capitalisation of at least 75 billion euro or an annual turnover of 7.5 billion, and providing certain services such as browsers, messengers, or social media, which have at least 45 million monthly end users in the EU, and 10,000 annual business users. Gatekeepers could also be described as having a strong economic position and significant impact on the internal market, being active in multiple EU countries, and having a strong intermediation position, i.e. they link a large user base to many businesses. Also, gatekeepers are those big tech companies with an entrenched, durable market.

The New Rules 

The new DMA rules will mean that:

– The largest messaging services – WhatsApp, Facebook Messenger or iMessage- will have to open up and interoperate with smaller messaging platforms, if they so request. This should mean that users of small or big platforms could exchange messages, send files, or make video calls across messaging apps, thus giving them more choice.

– The interoperability obligation for social networks / interoperability provisions will be assessed at a later date.

– Combining personal data for targeted advertising will only be allowed with explicit consent to the gatekeeper.

– Users must be allowed to freely choose their browser, virtual assistants, or search engines.

– Companies won’t be allowed to rank their own products or services higher than those of others in online search results or reuse data collected from different services.

Punishment For Non-Compliance 

The European Parliament says that if a gatekeeper does not comply with the rules, the Commission can impose fines of up to 10 per cent of its total worldwide turnover in the preceding financial year, and 20 per cent in case of repeated infringements. For systematic infringements, the Commission has threatened to ban gatekeepers from acquiring other companies for a certain period of time.

A New Era of Tech Regulation 

Rapporteur from the EU Parliament’s Internal Market and Consumer Protection Committee, Andreas Schwab (EPP, DE), said of the new rules, “The agreement ushers in a new era of tech regulation worldwide. The Digital Markets Act puts an end to the ever-increasing dominance of Big Tech companies. From now on, they must show that they also allow for fair competition on the internet. The new rules will help enforce that basic principle. Europe is thus ensuring more competition, more innovation, and more choice for users.” 

The Tech Companies Say… 

Apple has been reported as saying that parts of the DMA “will create unnecessary privacy and security vulnerabilities for our users while others will prohibit us from charging for intellectual property in which we invest a great deal.”  

Google has been reported as saying that, while it supports many of the DMA’s ambitions, it is “concerned that some of the rules could reduce innovation and the choice available to Europeans.” 

What Does This Mean For Your Business? 

The EU has launched a lot of antitrust investigations and introduced many new rules in recent years designed to stop the big tech companies being too powerful and to stop the use of some technologies (AI) surging ahead of regulation. The behaviour of the big tech companies has led many to call for tougher regulations and the formalised new rules of the DMA have been agreed upon quite quickly (less than 18 months), emphasising the EU’s determination to act. Clearly, it’s likely to be unwelcome news for the big tech “gatekeepers” who have been enjoying huge market dominance and profits. For smaller digital companies operating in the EU area, the DMA is likely to be a welcome step, allowing them more of a chance to compete and gain more share in a market dominated by giants for so long. For users, it could provide greater choice, and greater convenience, e.g. with the interoperability of messaging platforms. It is only likely to really work, however, if the penalties are severe enough and if action is taken quickly to send the message that the EU is really serious about the matter.

Tech Insight : GIF Creator Died. Just What Did He Invent?

In this insight, we look at how Stephen Wilhite invented the GIF file, and how his invention has endured while the Internet has undergone vast changes.

Who Was Stephen Wilhite? 

Stephen Wilhite is regarded as one of the inventors who changed the face of the Internet. White worked at CompuServe in the 1980s. Founded in 1969, Ohio-based Compuserve was the first major online service provider in the US and is the oldest of the Big Three information services (along with AOL and Prodigy).

Stephen Wilhite worked as part of a team at CompuServe managed by former chief technical officer Alexander “Sandy” Trevor, but Stephen Wilhite invented the GIF by himself, at home, and then brought the new file format into Compuserve to be worked on by the team. Stephen Wilhite retired in 2000 and is reported to have spent much of his time traveling, camping, and building model trains in his basement.

In 2013, Stephen Wilhite was given a Lifetime Achievement Award at the Webby Awards in New York for the invention of the GIF and his contribution to internet culture.

Died March 14, 2022 

Sadly, Stephen Wilhite died of Covid on March 14, just days after his 74th birthday, leaving a wife, four stepchildren, a son, 11 grandchildren and three great-grandchildren.

What Is A GIF? 

Graphics interchange format, commonly known is GIF (pronounced ‘jiff’, according to Wilhite) is a type of compressed file for images. Invented by White in 1987, while he was at Compuserve, a GIF allowed image transfers across the slow modem connections that were available at the time. GIFs allowed for colour, replacing the black-and-white run-length encoding format (RLE), and offered lossless compression, i.e. no degradation of pixels to make the image smaller, as with JPG files.  GIFs are one of the oldest images used online and the first GIF created is thought to be clip art picture of an airplane in the sky.

Extensible – Animated 

Wilhite is also credited with having the foresight to make GIFs extensible, enabling developers to add their own custom information and leading to the creation of animated GIFs in 1995. The Netscape Navigator browser is often credited with helping to boost the popularity of GIFs as it supported the .GIF format, including animated GIFs.

Although, after a relatively brief period of popularity, GIFs were largely phased out in favour of other compressed file formats for static pictures. However, GIFs remained, largely because, unlike other formats, they provided a fast, easy way to create animated images.

Popularity Again

Animated GIFs have had a resurgence in popularity recent years thanks to users on platforms like 4chan and Reddit creating inventive and funny ‘memes’ (from the Greek word for “imitated”) using the animated GIF format. These files have also been widely shared and popularised through other big social media platforms. GIFs have also been used recently for as a compact, universally accepted form of low-fidelity video.

It has been reported that Wilhite’s favourite was the first popular digital meme, ‘the dancing baby’ from 1996.

What Does This Mean For Your Business? 

Time has proven the value of the invention of the GIF which has stayed around and fulfilled a continuing need and filled a gap in an area which has seen massive, fast, and continuous changes – the Web. GIFs have evolved to enable creativity expression (memes), keeping them relevant, and it’s likely that they’ll be around a lot longer yet. It’s amazing that one man could simply invent this type of file at home, and it was truly an innovation that has been valuable around the world. With the death of Stephen Wilhite, the world has lost another of the great Internet pioneers.

Security Stop Press : Okta Hacks By Teenage Lapsus$ Gang Could Affect Thousands of Companies

It is believed that a string of hacks carried out on identity and access management company Okta, were the work of teenage cyber-gang Lapsus$, believed to be led by a UK-based 16 year-old. The hacks are thought to have resulted in the theft of confidential information, which could affect thousands of companies. Lapsus$, which is reported to have previously breached Microsft’s defences, is known for extortion, and it is likely that the motivation for the attack was money and reputation-building.

Tech Tip – How To Do A ‘Disk Cleanup’ On A Windows 10/11 PC

Freeing-up space and getting rid of junk files can help a PC perform faster and better. Here’s how to use the built-in Window ‘Disk Cleanup’ tool to find and delete those old junk files:

– In the Start menu, search for Disk Cleanup, and select Disk Cleanup.

– Wait for Disk Cleanup to analyse the selected drive.

– In the Disk Cleanup window, choose the files you’d like to remove from your computer, and select OK at the bottom.

– Select Delete Files in the prompt that appears.

– You may not want to delete ESD files because although it will free-up lots of space, these files are important for resetting a PC to factory settings.

Sustainability : Microsoft Data Centre Heating Homes And Businesses

Microsoft is building a new data centre region in Finland that will use the clean heat from its server cooling processes to heat local homes and businesses.

Microsoft and Fortum 

The project, which will see Microsoft working in collaboration with local state-owned utility provider Fortum Corporation, requires Microsoft to build a new data centre region in the Helsinki metropolitan area of Finland.

World’s Largest Collaboration To Heat Homes 

Fortum has described the recycling project to heat homes, services and businesses with sustainable waste heat from the new data centre region as the “world’s largest collaboration to heat homes”.

100 Per Cent Emission-Free Electricity 

The new data centres will 100 provide per cent emission-free electricity and Microsoft’s project partner Fortum will transfer the clean heat from the server cooling process to the homes, services and business premises that are connected to its existing, huge district heating system.

900 km Of Underground Pipes 

District heating, which generates and captures heat and distributes it to buildings on a large scale is the most popular method of heating premises in Finland.

The district heating infrastructure to be utilised in the project with Microsoft is the second largest in Finland for heat capture and distribution, with 900 km of underground pipes. These pipes can transfer heat to around 250,000 users in the cities of Espoo and Kauniainen, and the municipality of Kirkkonummi.

Climate-Friendly Waste Heat From Data Centres 

It is anticipated that once the new data centre region’s waste heat capture system has been built, 60 per cent of the district’s heating will come from climate-friendly waste heat. Fortum says that 40 per cent of this total will come from the new data centre region.

Microsoft Says.. 

Cindy Rose, President of Microsoft Western Europe, said about the plans for the project: “We are incredibly proud of the novel way this datacentre will sustainably power Finnish digital transformation, while also heating Finnish homes and businesses and helping cities achieve their emissions targets. In this unique collaboration, Microsoft and Fortum combine their world leading expertise in cloud computing and sustainable energy solutions, transforming the design thinking of datacentres of the future.” 

Positive Comments From Finland 

There have also been some very positive comments about the project from Finland. For example, Sanna Marin, Prime Minister of Finland said: “The decision to invest in a datacentre region that also provides surplus heat to our cities and homes is a win-win. It will accelerate Finland’s digital growth while making our energy system greener. I also hope that this collaboration can serve as a model to other countries and cities looking to achieve the double transformation of climate neutrality and digital competitiveness.” 

What Does This Mean For Your Organisation? 

We have heard about the challenges of cooling servers in data centres in the US, e.g. by immersing them in liquid, but this project shows that far from simply removing heat, it could be recycled and used to provide greener energy to homes in businesses. Finland’s existing system of district heating and its large infrastructure of insulated pipes makes it particularly well suited to this new idea. If the project is able, as expected, to provide a large amount of sustainable heating to whole cities, this could serve as a workable example and transform thinking about how datacentres of the future are designed. It could also be used to help reduce reliance upon other less-green sources of heating. There is still, however, the issue of providing power to data centres in the first place, how green this power is, and how much can be offset.

Tech News : Deepfakes About War

Deepfake videos of both Russian President Vladimir Putin and Ukrainian President Volodymr Zelensky have appeared online this week, both with quite different messages.

What Are Deepfake Videos?  

Deepfake videos are made using deep learning technology and use manipulated images of target individuals (found online), often celebrities, politicians, and other well-known people to create very convincing videos of the subjects saying and doing whatever the video-maker wants them to.

President Volodymr Zelensky’s Deepfake – “Childish Provocation”  

A deepfake video of President Zelensky was posted on his official Instagram account last week. The obviously fake video of President Zelensky, which was so poor that it prompted much ridicule from Ukranian viewers, gave a false message that President Zelensky was thinking about surrendering to Russia. The poor-quality video was dismissed by President Zelensky as “Childish Provocation”.  

However, the posting of the video prompted a warning from the Ukrainian Centre for Strategic Communications that Putin’s government may use more deepfakes to convince Ukrainians to surrender.

Removed By Meta  

The fake video of President Zelensky talking about surrender had been posted on Meta (Facebook) and its Russian counterpart VKontakte. Meta quickly removed the video from its platform for breaking its rules relating to “manipulated media”.

Warning In March  

It had been anticipated that deepfakes may be one of the weapons used in the cyber war against Ukraine which has accompanied the physical attacks. Earlier this month, for example, Ukraine’s Centre for Strategic Communications warned that that Russia may use altered videos of President Zelensky in order to distort public perception of the invasion.

Putin Video  

The Putin deepfake video, posted on Twitter, showed the Russian president announcing the surrender of Russia and asking Russian troops to drop their weapons and go home. A close examination of the video revealed that it had been made using clips from an address delivered by Putin on Feb 21.

What Does This Mean For Your Business?  

Deepfakes are now becoming more common and the case of these two videos shows how deepfakes are likley to be used and weaponised in future conflicts, elections, and other campaigns as a propaganda tool. Although, as in the case of the President Zelensky video, the quality may be poor, these videos are likely to improve in future to the point where they could be convincing to many viewers and could be widely shared, thereby successfully influencing some opinion. Deepfake videos are part of the wider challenge of fake news that today’s social media platforms are facing and, in this case, Meta’s rules on manipulated media could be used as a legitimate reason to remove the video from its platform.